General
- Target teaching-mini-v2.6.zip
- Size 1.3MB
- Sample260622-rreprsc171
- SHA256 38371888b340cd3b223d8532f2fc64479cbea284a84a2ef9859fe352756c3aab
- MD5 cf0959a5008aa27d8c1757041e3cdb0d
- SHA1 927b58755ea4d9e6f096354ef29f4ca95241d1b7
- SHA512 7dc16448d088219e89ca3cbce1405cabc8a91916abb97e95b6180c8830ad1426df7083074e4210e72236dd5c2386e32589214d8b61fb0ebef6ee71565927c389
- SSDEEP 24576:CyJezoZjxbq9j8XJlqrGAuImQIMESQ+hcqMXHC0Clwi6/CttWaRR:f0oZ9bq+MmMEL+hcjXHC/wnwdR
- TLSH T12A55339A407D29844F3D0A6377EF9A1C91108AFC10420C736B6A98DB663E7DFC77499B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Launcher.cmd
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Launcher.cmd
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral3
Sample
clib.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
clib.js
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral5
Sample
lua51.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
lua51.dll
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral7
Sample
luajit.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
luajit.exe
Resource
win11ltsc2024-20260617-en
Malware Config
Targets
-
- Target Launcher.cmd
- Size 43B
- SHA256 964dfb63ff140149ed8b310dba63fd8d82a82dc9979348e93b3dd7206fd71d13
- MD5 7eb6dac341fad662bf2bedfce7a7fdce
- SHA1 a6de13e6a4aef51f7b2bc298181ee5e02dd94861
- SHA512 a4035ef29b0768169ceec6a21ff2f77a6cbe752f32c50bc130f30218dc46fceea87828922cf0811f17d881bc182d244447f35d39750aab81abdf40b0459eb6a4
- MD5 SHA1 SHA512
Score6/10Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target clib.txt
- Size 333KB
- SHA256 593916916552ce87cd6fde7353875e023cd8a89f13d222fc636634a43ff65cdb
- MD5 dd76846d31e2aa2f5e8c70588d51c2df
- SHA1 bef485d8b3ab03ec389b984a231369f9aa2852c0
- SHA512 7eb584a779de23f1d826b02788233e250deef7809e6d26b5d421443e2df38f4905deac690ea5e93befc787a11325224df7786b3ebe882a025342b01a83d47da2
- SSDEEP 6144:EXGs+Qdx8Exl+9RSyNX267M8/08WfztlUryM0b6cusxcT34Fdw9jvqDroncmV+ro:EXGs1H8ExM9/ePVSsFwDqDm6o
- TLSH T1A874B9E4A14804F35EFB8594DC3B6D9B61BAE5E0430A668B0F2FF1AA71705B1C7CD846
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target lua51.dll
- Size 3.4MB
- SHA256 c7a657af5455812fb215a8888b7e3fd8fa1ba27672a3ed9021eb6004eff271ac
- MD5 4ebd617a3ad9a9619172bd14a902a400
- SHA1 270f66d2c84ee86ff4b07c6220c51abd4897b5f0
- SHA512 b008a00d7e57ef4786b14f28aee3880318820dd85d66539263a3f68b547e89bce8db32ad422d4eae6795219ec3ddcd72e7780aed9e725ed3c171d11492e47571
- SSDEEP 24576:QXEeYq+Fjb1h2Ac9qJqvqj+OhbaijGPDX732ywPKpQlABQFi8ePj40RvzinxO4xS:EEDv/2Ac9qB+OR4n3xBQKvjGQe11Fgl
- TLSH T129F54B49A7D1995AF112C2708E9B4375372BE410333B9FE76F8AE2203CD7AD8DD95602
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target luajit.exe
- Size 98KB
- SHA256 5343326fb0b4f79c32276f08ffcc36bd88cde23aa19962bd1e8d8b80f5d33953
- MD5 00f60ee3ff2dee681b5d7d442009b2c2
- SHA1 f5199b4191add11d02d58f521cbea21465b7ff6b
- SHA512 6e3754ec8596f3aaed92387c5bd56ee9d65fe54af6f44d2bc89b4df0f670e379137bc5eca5ba8aceb030bd4b45970b3c01f2132d1eef53f5070f9af4d4246562
- SSDEEP 1536:mmNzk2shF9CXUatIEqTIm4gKN2PwJy4wMUFA8:mmVvtQTKN64wHK8
- TLSH T1A9A3B5CBB6A44DAAF740423C80E6D321613FF6F0A6131B576A3476312F52B916DCB16E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10