428d1ef405ad81554913603a8b0b961cd8dd916b70f6bc06e9ea17aa65a0e67d

Sharing

Copy URL Twitter E-mail

General

Target
luajit-decomp025.rar
Size 688KB
Sample260418-byb98aev9x
SHA256 428d1ef405ad81554913603a8b0b961cd8dd916b70f6bc06e9ea17aa65a0e67d
MD5 e00dbb8c27ed5bbaacdc564e98447922
SHA1 3606cea8207a9ea026e27eaf28c631215427ba4b
SHA512 ecb56ebe0dda8d04c18b6a97184c66e3a535138011a69dd91d805bca5dc21b2323eeea23242e21dd92a0508eeb8338c1cfb5c1a75eae6436d88a4c470c0f5841
SSDEEP 12288:XIu6WJgZ5pwE4QWaq6Gwm+5jquWHHRdl9xlBZyvVUHn08r:X6eapwwWPw5Za19x7ZCVY5
TLSH
T103E4232D3E593293345400F7B8ABD140C942251B7475A9D338799CDAE1B1FF29982FAF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  luajit-decomp025.rar
- Size 688KB
- SHA256 428d1ef405ad81554913603a8b0b961cd8dd916b70f6bc06e9ea17aa65a0e67d
- MD5 e00dbb8c27ed5bbaacdc564e98447922
- SHA1 3606cea8207a9ea026e27eaf28c631215427ba4b
- SHA512 ecb56ebe0dda8d04c18b6a97184c66e3a535138011a69dd91d805bca5dc21b2323eeea23242e21dd92a0508eeb8338c1cfb5c1a75eae6436d88a4c470c0f5841
- SSDEEP 12288:XIu6WJgZ5pwE4QWaq6Gwm+5jquWHHRdl9xlBZyvVUHn08r:X6eapwwWPw5Za19x7ZCVY5
- TLSH
  T103E4232D3E593293345400F7B8ABD140C942251B7475A9D338799CDAE1B1FF29982FAF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  luajit-decomp025/decoder_new.au3
- Size 30KB
- SHA256 d28f3dc61117373bd9b5d28d5c35b8cc5ce89dcc36d7e42fc174e3455d429b7d
- MD5 55f16778d27c0585bdb2771736afbd07
- SHA1 1f1b393ebaeaa5b9ef424628442ed7230437b484
- SHA512 426c62544b5cd058454be91de370399b677cc3805ef00d35064dfb8e694dfb78b04ab6092718350b9552822fe5567eeeedbda7f38e9feae4d98d9824226b0fa2
- SSDEEP 384:weRfO8bcoIjp72tT36C/wwuq9CMMlbHen32DiDKFATarIShuo+KYGhe3c/pGYKWG:weRfXIjp7QT36CZ9CMM9e3gACYBj
- TLSH
  T108D2F035BF6F452C4066502CAB9E150DD4DE2B32D036E278EA3E9064B5ECC1E90FA9DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  luajit-decomp025/decoder_new.exe
- Size 309KB
- SHA256 7da25cc44a6c31bb8da02a6d06e5b96be2adff86bab8c2da55ace12d8bc7a8be
- MD5 77feae2e557b370bd7f380031386097b
- SHA1 0f32bc9fe3d61ddd0abe7a4b0490e3f651c90906
- SHA512 d6d76e2cb049ce3ec74b4fc9f05b239390f4d14369c837108577592e76117b9b8d8b3fa017d6c6ab219efbbdb806b2ad5fac0c7a6c279e29bae4acadd5dad85d
- SSDEEP 6144:Q1db49+rEg024fpLZazEjvE/rbay19tSt4bO2BaDmeBJe59kIN1:QjkArEN249AyE/rbaMct4bO2/V91
- TLSH
  T19164134132199CD5CAED0A31B8D3CFE247A1BCB91D60D20EB1C5FD3B36386276A5B294
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery upx
- AutoIT Executable
  AutoIT scripts compiled to PE executables.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral5 behavioral6
- Target
  out.upx
- Size 631KB
- SHA256 23f5a74291741a374381eb8aa069d2225c6438ec5cde0b2b6af8fa415318cfd5
- MD5 7c768c3f0cd0af52d5e1ba00fdee1e3e
- SHA1 ebb71b53d843c03f117920bfb1265e1f971f280c
- SHA512 317af16ef3a97b3e6cb6d529156956625d071cb27984a4c1b4b1a9af3d4432a6e71bd94b9455138e8bd08bcfa35924af219697675e83b8705c06c9246f0893e5
- SSDEEP 6144:iKlRIwag0bg7vxVLWnCAZC+ZDGErKf3nYbbBZaK56A8iFKeYer6HF4mnDqPJjJ9K:iaWzgMg7v3qnCiMErQohh0F4CCJ8lny
- TLSH
  T19BD4AF12B7D680F6D9A33971297BE32BEB3575194323C4CBA7E02D779F211009A36762
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral7 behavioral8
- Target
  luajit-decomp025/decompile.bat
- Size 137B
- SHA256 2b034d5e3b5b891c2dd73d492363a28617d12ec90c8fe485133abb7bb4294d5c
- MD5 f1171c04cd43ce638b9c9152c9404187
- SHA1 fcd1eb9c6420dcc2f2654d8d272385f0e400446a
- SHA512 6607b552588b3a643c1679d434cc4648a3f18eeb0f0bfeb0a4a7e18d187df5b4f4e13d4e94cc6833097c0121fba84bb1123e3d8ed7f5c6b8ec5d7c9b65ee0d2b
- TLSH
  T1D6C02B5C401746F0620B3344C10C0003F02EC00FEA0208C2F00702D4317B41A36031BD
- MD5 SHA1 SHA512 TLSH
Score

5^/10

discovery upx
- AutoIT Executable
  AutoIT scripts compiled to PE executables.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral10 behavioral9
- Target
  luajit-decomp025/jit/bc.lua
- Size 5KB
- SHA256 1f7b84785794e707f7a00a89b44f7b0494ad97163f9f8e0fea1132140400e5ec
- MD5 e763ff4b7689b3df8c7b65e334c157ee
- SHA1 59fd843a369bf9b26e4c7fe117a15a21ac9d526f
- SHA512 dff167212d5f4c3fff85df2e565df88146aa2c48d6d62f1478ab6ecb12e46a6860d53d29de2ca0df6e12caf0c8c185553276919d8460ea35ca42086d52e2e5dd
- SSDEEP 96:LHZ5fF+/m2jy1f3yz7WJB/sodEiZRfJdhxMwJJGay+XxY5ZGr:DZ5f0O2jy1f3yz7uXSiZhbhCgJhy+Xxz
- TLSH
  T1F9C1425D6D5132B0A3E2E571C98B6604FF19B023505A21D5B8C881E03F71A7EC2FFB69
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  luajit-decomp025/jit/bcsave.lua
- Size 17KB
- SHA256 6c1a2ab47bfaad06d7f23290c3a0a05df7e31c06841eac665e17c067f85fe5ee
- MD5 5c5fd24f598e6b11e4cd4d82ee0fe038
- SHA1 d554bec91c0fe931680f53a323424cd6c6fc00a7
- SHA512 d7e7c84950b2cc9e56a33f6289f7a80b3d67376607aa9dd934bc66edf5265389305b39ce9206417a88123a1cb2afa18e4a4e96c435f81bb949274984b018063f
- SSDEEP 384:4GWASZ9dQDRMJ15YK910DzORj5iFa6JaW1Z1T68/OVrbo9u:4GWASvdQDRMJ15YynRjsFpJ9T6KOVrbX
- TLSH
  T1E482D44B2D6062626782F5B1B80B1814FF6A51764A4C98A1B4F940E87F15F3D83FE73D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  luajit-decomp025/jit/dis_arm.lua
- Size 18KB
- SHA256 aec88e349dbac86d97dcd4b82f0e8eab389475fa87790052fc8b060f6f0d8408
- MD5 d88a1fe93c99df8ca0a20f464c80a0a1
- SHA1 c761f5c72913e90a28c8bca0a6a77f3df1bfb546
- SHA512 3087b52d4cfc512135090143cb5f17f99121ed3a1ab6d4e23b0b20f27331348246a6437036d22258d69042e39efd0a35b4c0c209b30eccca17b526f6e666ee38
- SSDEEP 384:Tqvq43yvuwhUyapA729MqjAJ0RqJJjo8WSzdsxHVb8FydjKnqQkf:Tqvq43yGwhwA729dA2RqJJjo8WSqxHtZ
- TLSH
  T1D8922C246C26082DB217D2715CC72904FF3CA51BAACBF926724C94E06F1DA5E85FE67C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral15 behavioral16
- Target
  luajit-decomp025/jit/dis_mips.lua
- Size 12KB
- SHA256 aa3e0893aa07e33d74c47aa0d2879bc14c5af54545ed079e2c01c82dacfd46fe
- MD5 54e7c910176bf0336ca5ed6e78bed1a1
- SHA1 48bad42d5b3b6ed3e925a83e0dbc7bc44f1b290b
- SHA512 9683f0e217effa02439f3030fba37ca5256a9434c0d85cff055f7fc5799c12296c3c5731da74fadcd23c14f1241b211f568790d1effc1536447e0ea65f3e068d
- SSDEEP 384:nBkZLrGaHY47Sb7OJlmRlDH2qLzaWoddLcy:nBkZHGaHY47Sb7O6Dz1LOWEN
- TLSH
  T18742FE892E310A3D518AC565CC1F1C89FB38981AA15FB575F28D80A03F8E77D50FDAAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral17 behavioral18
- Target
  luajit-decomp025/jit/dis_mipsel.lua
- Size 710B
- SHA256 ffcb4627715727d7b9baa31cbc0a01c423e7f8311ca4c09c99dd1b79983dad4a
- MD5 a9127a8b172f24879dedc0b87192cac1
- SHA1 1ea89f2a59a55e94fe5234ba86e5c778eb5e98bb
- SHA512 c6da5c835408ea907db0bacfb623f58a4af4e7ffd80315a0e88c2f885df2bd8330b121654e68d7f29d35e012778b5d121713ef506a67e9d68fc78d0e89c8af04
- TLSH
  T16601C99A1C503F0672A9F8E3C89BB484FF89C00813916220411492E6A06E89CC2CF226
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral19 behavioral20
- Target
  luajit-decomp025/jit/dis_ppc.lua
- Size 19KB
- SHA256 5032bee98860fe7c03924a51f70892c81bd26a343a8bd279137c14be1135b849
- MD5 2e4d05af8d4926147604e6605e5c382e
- SHA1 a6b0e613fed517803723e667dd48849af43a9a44
- SHA512 893758b127078d9073531c6e59c16aac72c661ed282434977555d01628fd92d2f1b0333375ca362ee5b74c8c556ae37748d3015d53e94fdccf20d69b15df322e
- SSDEEP 192:KKrH4Je133i1eSEobzQhy0rmgbw3lqRU9g3IovLgsVGyoIQV0fm2ZiScg666JGBH:2m3iAStAzfp3In7lVsvP/2qQkl
- TLSH
  T1F89200551C53082D9B07C2B88CA626C4F73C18C3799DF825B25961802B5CBFA57FE6EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  luajit-decomp025/jit/dis_x64.lua
- Size 707B
- SHA256 9081a4ab7f9a5a19b56159da039b2b6e03f1e1daae3437f8b752d6836d127994
- MD5 ba042424c474b442c07ee3178605a535
- SHA1 b3309e942b0783c44ee558d3b9c817263848b73b
- SHA512 f25b09e5d6cef277c8b5e7ad2b099531176f08d97956871095e75b7427fbdb9cf6b512d09528660f8ebfcc2511c311a47039a7be3872511b77f2d084c7f547f2
- TLSH
  T1FC019ECD2D513B27125AF183C8EAD089FE89C07903213954C97982A650BEC1DC6CF137
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral23 behavioral24
- Target
  luajit-decomp025/jit/dis_x86.lua
- Size 28KB
- SHA256 3168668f8aa07895d534e43f2f6eb32c039875e1e2cef4def03170c9eed0bf8f
- MD5 525f6d4acda29d0ba883da693c97d2ea
- SHA1 a64a836563228d22a8450717381b07267afd4625
- SHA512 dd07e8915a466122936edb715154fd6312e4429c3f916ab3985a82300dfdbe5880e35a94319b4bb0dc1affc20bebb3a66a9229890ef11103a98cbc125fd0aec8
- SSDEEP 768:pu6MKMfMpwfobHzN4LcSnRs6tMg98a/0FT/8I+LyJIPeYWAVw:MLCWoWLZs/nwI
- TLSH
  T151D284AA7D621B37A20AC8FD458B5604F27C64335618BC22B5DC91F0375D368E1FE7A8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  luajit-decomp025/jit/dump.lua
- Size 19KB
- SHA256 2629a3e6d9bb2b458954db24171c1c3c63f02cdfd6d7f43b606fbb6698fcbfb8
- MD5 95497a886a4cb0c56669ecade6661015
- SHA1 6b580299cb6756843a90d3cb97432e935e5282c1
- SHA512 d8acad22b5553b59098429c93d2e78185c8ee4bc34e5130614011606860ec5f589623ae835cb81aa71be7db30c3eae3caae1240fa8d36026d5f380a0820810e5
- SSDEEP 384:GcjGpsydRdd+07zNjTAIFzfAgm9AyAg693ykFdgiUghVA7NLnyfGXP3iDVbai9GR:9jydRdd+07zNdFzYUBFGiUghVA5LyfGl
- TLSH
  T1A492404EBD5227B167C2E1B4A94B4508EB7C61234005267576DC81E43F6A72EE2FEB3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  luajit-decomp025/jit/v.lua
- Size 5KB
- SHA256 1813905ad99939f2bf47d6cd416d0d0d99525745f0ddaf96064681336071d43e
- MD5 51ff2579a0e6105f929e35f8e07bfead
- SHA1 30b6fa3b83cd3c9d745645eaab4974e56fc65e99
- SHA512 27b0e345b2257b650993ded54bd034bf6981fc10b1d78768681777889603774eb3777a1fefbd89a1aa0a8249ca9a0e6904a195882ee84c83544f5a8ac0d268b7
- SSDEEP 96:LWjo1AGchfKWoZ5BeznqGpe/GTJ+Vnw9rFD5x6zgGPGmkreBvCqfCOlQkNdLJ0rh:Sjo1QfKT5Anh8xw9rFD5x6zgAGl+vtfq
- TLSH
  T138C1842B1EC623B316D2D9B1E14F47A4DF68C56B005612E0BA1D40D0376262E92FFBF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral29 behavioral30
- Target
  luajit-decomp025/jit/vmdef.lua
- Size 6KB
- SHA256 96e38f0573d8fc5683372d92ddc049ca7bc439baf5ada5a7883ffb17a412d174
- MD5 f1b54581b421b46a691ebaf0abed8be9
- SHA1 fb6abb2489712eef0864707fd8338b4d37ee9766
- SHA512 c52059ba4aafc5fdbdc48c9e8d3a17a3c41da14f2dd625c844208a2fb5e9521e09d22dec2623047229f5dc49d280cab85d6b3702c42b624e175af8f1280fa62a
- SSDEEP 192:E/AydEs/pChXiuAeUvataVqwI52tOWdAUlS0IS/eTnTnTLkGzb8+//Z9pXGKWTuv:wABsxCBippvatmqwI52tOWdAUlS0IS/I
- TLSH
  T1C7E13E074182F0A2CBB8E740719D97941D2F25EFD2E36C88496C90F9393CB14BD56A6F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

AutoIT Executable

UPX packed file

AutoIT Executable

UPX packed file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32