fc107ff1358f1c1780838a944e0b1a8bc11f20a45e56864e18164f04a8bb5db6

General

Target
fc107ff1358f1c1780838a944e0b1a8bc11f20a45e56864e18164f04a8bb5db6
Size 1.3MB
Sample260528-avq4jad19s
SHA256 fc107ff1358f1c1780838a944e0b1a8bc11f20a45e56864e18164f04a8bb5db6
MD5 e0cd6e99e786cfdcd3c311ab2dcfa28e
SHA1 cb5744c70547a5d6a2820734c12fe034d0d543b8
SHA512 0ba02c90ceff91e2451bdb2af127f69d1695bd26e39f2230d5cfc157be4be9ed40f454bb312f9c9387e8f3a3cbe3f86cd5e2364e079122573230ac1bbceec3c5
SSDEEP 24576:voZjxbq9j8XJlqrGAuImQIMESQ+hcqMXHC0Clwi6/CttWaRWYf+qO:voZ9bq+MmMEL+hcjXHC/wnwdWq+qO
TLSH
T17E55339A817C18C84F7D0A62BBBF955CB224CDFC100208672B7659AB353A7DBC374997
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

execution

Malware Config

Targets

- Target
  Launcher.bat
- Size 378B
- SHA256 6cd987d414e5790b9b3a0f811f513515950e28d0c0084e7558e0bf7094a99321
- MD5 e93e40ada6a9a0cc06da88b7887542cd
- SHA1 6deb4229c63fc0fdfc813af07ede2b007fee4c50
- SHA512 2f157555af633929b0c8da7d49c1ab97e99fdf7e70fdd3c165c83f84783a270e07e06d0662dd3e6bbb8bc15868b568155e13afa32a512cf7931dbcefa37b52d9
- MD5 SHA1 SHA512
Score

6^/10
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral1 behavioral2
- Target
  lua51.dll
- Size 3.4MB
- SHA256 c7a657af5455812fb215a8888b7e3fd8fa1ba27672a3ed9021eb6004eff271ac
- MD5 4ebd617a3ad9a9619172bd14a902a400
- SHA1 270f66d2c84ee86ff4b07c6220c51abd4897b5f0
- SHA512 b008a00d7e57ef4786b14f28aee3880318820dd85d66539263a3f68b547e89bce8db32ad422d4eae6795219ec3ddcd72e7780aed9e725ed3c171d11492e47571
- SSDEEP 24576:QXEeYq+Fjb1h2Ac9qJqvqj+OhbaijGPDX732ywPKpQlABQFi8ePj40RvzinxO4xS:EEDv/2Ac9qB+OR4n3xBQKvjGQe11Fgl
- TLSH
  T129F54B49A7D1995AF112C2708E9B4375372BE410333B9FE76F8AE2203CD7AD8DD95602
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  luajit.exe
- Size 98KB
- SHA256 5343326fb0b4f79c32276f08ffcc36bd88cde23aa19962bd1e8d8b80f5d33953
- MD5 00f60ee3ff2dee681b5d7d442009b2c2
- SHA1 f5199b4191add11d02d58f521cbea21465b7ff6b
- SHA512 6e3754ec8596f3aaed92387c5bd56ee9d65fe54af6f44d2bc89b4df0f670e379137bc5eca5ba8aceb030bd4b45970b3c01f2132d1eef53f5070f9af4d4246562
- SSDEEP 1536:mmNzk2shF9CXUatIEqTIm4gKN2PwJy4wMUFA8:mmVvtQTKN64wHK8
- TLSH
  T1A9A3B5CBB6A44DAAF740423C80E6D321613FF6F0A6131B576A3476312F52B916DCB16E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  mse.txt
- Size 336KB
- SHA256 5c7ecc927691e24274ac6b0d9e915628138a68774c827bcb82670eaf56bd1a8e
- MD5 888422ff5b733231eb715ce97eefaaf0
- SHA1 c9e80ce47612ddc36848eb88e322936700c2b84e
- SHA512 05cece34af0eeda1e16ff659679bb0cd6cfab415cd5816fed9856881fba37d855546d831ebb97d3fb95f78d8c9cf204ed36cc84fd1678b3c83382495c8b3d2c0
- SSDEEP 3072:fd4+q5nrEn3Ag07pu0t+5RTdnlt+JHYQWNfchpBiO9oopPzQeyCQww/bLHWZU3Yo:fdWrEn3AfY0+F7QiYT7QeizL22b
- TLSH
  T11F74D6A9A18C08F659FFC5D1DC2B9CDB91BAE7F1034A62474F2CF5A572609B1C7C9802
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

1

T1059

JavaScript

1

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Looks up external IP address via web service

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8