General
- Target Software_2.8.zip
- Size 456KB
- Sample260622-r4yneadv4j
- SHA256 8c0959eb6eb6f5d86c0581a97cef8d702ef6db14e7060513be17a1d700008854
- MD5 bb657c57fe782998cf5b7b609228be23
- SHA1 f2d950c791e62eb2503b85911e703e7aae785654
- SHA512 4d8f158456e8c8322b9028bb3d729d8dec3ba4bc92eb0e7ee64d12d4badc3e4c48f7b7bd70fd7dd0f91a8ff108e55a1e1e09ecb26bbb4929bc426ed6e820fa99
- SSDEEP 12288:5zYfcEaN9B/Jm0LU0gM7aQT4HphuCmCJ91YqEZW:mfclN9BhmSHNSuCmIzqW
- TLSH T134A423A8A5C06FF6DE773A104D241F160628A50F29EBADAF9F033640CD6ECD056971CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Application.cmd
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Application.cmd
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral3
Sample
binc.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
binc.exe
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral5
Sample
lua51.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
lua51.dll
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral7
Sample
util.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
util.js
Resource
win11ltsc2024-20260618-en
Malware Config
Targets
-
- Target Application.cmd
- Size 25B
- SHA256 4022e59005850fcdaccbbb28e3bcfc78e25d0db9c70a6ca80b6693f8697fc829
- MD5 291a1b72470ea75c3ca802026b25fec6
- SHA1 65d2c6ffa9899daf707b298fd8b7f2721953d640
- SHA512 16904db47c78ba54b658d6338de2173ca6965f6907a5d742ca545a46f43ec3ee1c3e5d1278076e95a1125dcae7008dd8aa23ca161304053da22bb7a364cb738b
- MD5 SHA1 SHA512
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target binc.exe
- Size 31KB
- SHA256 7ad4b911d05a12f91ab27ba3baa351a56653ca099dda7ad87ee2b94f8cd018c9
- MD5 c2a7f19ba96dc460d591d37d664fe6aa
- SHA1 2e930eb7072ac6f8906c5df11e041d88aaea1fcd
- SHA512 baf23c903b68e13786657cf1bcfc6db55493988eac28edc3caaee1011f65ff04eebef9e204853a3abf07d4a36ad7ef5bb8a3683863fac600b49590d7376624ad
- SSDEEP 384:ib7da2Z2gMMu7VGueXHa2RIC23208fKUS5CWhYJ8L:Wa2JLuZ/eXaIO3r8iuWhYyL
- TLSH T138E2C62DB68258DEC591D27CA0D60731F079BD56172766BE1308F23A7E21AA1CB3F427
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target lua51.dll
- Size 587KB
- SHA256 04d3c82782927330d56827ff551697666dbab4b3abf5b86bde492efdd142bc58
- MD5 82e81158366a953c33d0720dfe34b95b
- SHA1 4b5eee1d2ba5bf3ca0389c0415626634c640a4bd
- SHA512 3c9f7360bafc48d573d24fe1612e23a97fe08944c9ad5f5d46818d5e74365d00d7e5aeee63391d4c0de7390b5fecaa695b698fd62ccc741dec181f0d24ee82af
- SSDEEP 12288:Psx+0xTI82jcKvyp9jvgEXXBKHKLx2h601BqStQIF3yB:OrmyXMKF2hXBtQIF3yB
- TLSH T173D4160BA6B362BCC267C134879B8BB1B931BC5402346DBF55A0E7311E71E91179FA39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target util.txt
- Size 302KB
- SHA256 6f80070e39029daa88e0531e504febb1e5d02401d1d15c42d65355c57b641463
- MD5 565ad398db61f3f9c2eea10a8b38116c
- SHA1 070b9c30f2b40cb0142a496446b39dc3d1f93d6d
- SHA512 945b73bd2449540d3a8811cd8afc849cd1bc30fcd91958f726e64d7412bb2d02884b7d312d69ca5a8d158b7b860bcb89b49fbf803a32ccc5d1edecd0aa89d202
- SSDEEP 6144:+LqNKBLXgSkENpvVCDJ9C83zW4yxJzX/ex+Sx5:+LNZkUNI49Bwx5
- TLSH T1F06418D46E4908E1DAFF86C0DE338D9711B764F6474A26CF4E28FDE83A902A1D1CD856
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10