General
- Target Software_3.7-beta.4.zip
- Size 1.3MB
- Sample260622-rrbccacz4r
- SHA256 6b6ac439c4412c871cdda5e2b50b91388012842a1947ac0ab1173d8fbad4e799
- MD5 efc9b84c87b771f579b74c5bd36d3fef
- SHA1 3089b528c8176fb3f8f25cfb2f961453e0716e3a
- SHA512 a7b28fbcdc36431a27a3a77db3b47baa6feb83e76e4fe35bb2a58a5c87525bea917c984d59f8773b41c56790969e1de1e42958121beab0b183e4fa95e07e053d
- SSDEEP 24576:7MZyoZjxbq9j8XJlqrGAuImQIMESQ+hcqMXHC0Clwi6/CttWaRn:7MZyoZ9bq+MmMEL+hcjXHC/wnwdn
- TLSH T13A553387C17C18C84F3E06D7ABAF995C72288EFC100304766A6658AB253E75F87395DE
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Launcher.cmd
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Launcher.cmd
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral3
Sample
arch.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
arch.js
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral5
Sample
lua51.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
lua51.dll
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral7
Sample
luajit.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
luajit.exe
Resource
win11ltsc2024-20260618-en
Malware Config
Targets
-
- Target Launcher.cmd
- Size 285B
- SHA256 1fab887caa066d040aaee133d831caabaf94ff9d98dab342a0e47dd926664519
- MD5 e31c01aad7fd46650088ff6250aa15b1
- SHA1 df37352a15f99cb79f88d412bf20b145f83cbd12
- SHA512 6bcd1641090815a2130b39b82bc17a2e39f51397f774857287b83995b07d6bf9035c2018b5bd8085b47405a05857469e751c6448c16be5b139c1db032facbd3c
- MD5 SHA1 SHA512
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target arch.txt
- Size 347KB
- SHA256 cf8ad38b4ee7859525558017c009b48685773ffbb255f88a170474439b73c0f6
- MD5 a75c65b4e56f7321d3658cb92ced94b7
- SHA1 c6c9d7de860a848e4053acca3993d2d914889e64
- SHA512 51cdad7f6e2559317d53f1733031dc947be0b8dfb73cd0eff13e1b87cd9c4c0b50d594550ff0c8e5370e069c748e5897c6e68d4399d1a60e74c63e622702b5d4
- SSDEEP 6144:nTltF21+O/4O7KwPk8sRIXgUA1Rc5Xo9EZ4Yj6575x1P:nTltM+mnKwPk8c7k6575D
- TLSH T14874B8F5514C0CF919FFA660DC6B9D9FA0BADAF10306664B0F1EE1A531A71A2C7CD806
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target lua51.dll
- Size 3.4MB
- SHA256 c7a657af5455812fb215a8888b7e3fd8fa1ba27672a3ed9021eb6004eff271ac
- MD5 4ebd617a3ad9a9619172bd14a902a400
- SHA1 270f66d2c84ee86ff4b07c6220c51abd4897b5f0
- SHA512 b008a00d7e57ef4786b14f28aee3880318820dd85d66539263a3f68b547e89bce8db32ad422d4eae6795219ec3ddcd72e7780aed9e725ed3c171d11492e47571
- SSDEEP 24576:QXEeYq+Fjb1h2Ac9qJqvqj+OhbaijGPDX732ywPKpQlABQFi8ePj40RvzinxO4xS:EEDv/2Ac9qB+OR4n3xBQKvjGQe11Fgl
- TLSH T129F54B49A7D1995AF112C2708E9B4375372BE410333B9FE76F8AE2203CD7AD8DD95602
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target luajit.exe
- Size 98KB
- SHA256 5343326fb0b4f79c32276f08ffcc36bd88cde23aa19962bd1e8d8b80f5d33953
- MD5 00f60ee3ff2dee681b5d7d442009b2c2
- SHA1 f5199b4191add11d02d58f521cbea21465b7ff6b
- SHA512 6e3754ec8596f3aaed92387c5bd56ee9d65fe54af6f44d2bc89b4df0f670e379137bc5eca5ba8aceb030bd4b45970b3c01f2132d1eef53f5070f9af4d4246562
- SSDEEP 1536:mmNzk2shF9CXUatIEqTIm4gKN2PwJy4wMUFA8:mmVvtQTKN64wHK8
- TLSH T1A9A3B5CBB6A44DAAF740423C80E6D321613FF6F0A6131B576A3476312F52B916DCB16E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10