General
- Target aws-practice-1.0.zip
- Size 573KB
- Sample260622-rrfbasc18w
- SHA256 8139f45547de820fd2af556dae2c6bd4f59da50f27c3571ff3d760b6e53a76a8
- MD5 32e3ed7d1334ae6cd9d5e8167f51f622
- SHA1 f9c85d148281c305e3e86e6c8bff8fa26b80a604
- SHA512 c2b9dccd1d829c7fb3b32aba9935bcc19bf4bb24efd60b4b61d3b63875dcf29a818db3b147dd72a894a8c80f89a9dabe7e88fa8b5bb88c4ce366c0124ffb90c9
- SSDEEP 12288:D+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2byJCH9I1P0QKw6FEdU:D+QqldA/TSO713u7xnQH9IaQKHD
- TLSH T18AC4238BA3FE845390BF1F58AA57B48D091976F34722DC93146A3213D9CB323B752698
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Launcher.cmd
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Launcher.cmd
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral3
Sample
luajit.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
luajit.exe
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral5
Sample
uix.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
uix.js
Resource
win11ltsc2024-20260617-en
Malware Config
Targets
-
- Target Launcher.cmd
- Size 28B
- SHA256 ce1e33483d353200a266b3bc383ccf500e5a760c6dcd8218747260f5bbe39509
- MD5 fc3979a7ae6f3b0d64986c93b7911991
- SHA1 ab9685d1f483f40a5bd995173519a12473fa450f
- SHA512 83978961a0c623e9b98a300e0442a55c1796cea0bfd9085c0ba7f9ef1e9be6fd72585403783110e0b1f53bab70cd7038410cee0b84dca7eaa38884a08a441f77
- MD5 SHA1 SHA512
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target luajit.exe
- Size 857KB
- SHA256 f3e34c9e36f3be065d80d456281d31dd1cc85eb4980db7fa8c1b0eb6f29c25d8
- MD5 bff3a81de5ffacbeddd5de793cede666
- SHA1 d49590bfb8b160595382339433535c481ce425ac
- SHA512 a8111d16ef3d1443dcef5511cb5151da2427ff47d9b2d2b759289a88f057702c4f5812b09cb84af2fb00e8da1ad82b478515efa08b44ec0ce9d3cee7e34c385d
- SSDEEP 12288:YL0c2HKju1FzLHUN2K19i5y4wcPXQY8NiUlneUuSy9w6/W0BCoJzmSra:22HKmFzbIPA5y4FPXl8IUp9y9h+r28
- TLSH T197158E58A67401F6D9A78134C9569A4BD7B2781207205AEF03E4AB773F33BE41E7B321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target uix.txt
- Size 302KB
- SHA256 8cede35b80b1deaf732c2b178d908f91b3e7a0c114d06dfae9075b8a9bf78b8f
- MD5 fe67c54a6387db6bf31f73ea6d695c12
- SHA1 97134dbb856b11be3b018508e980f58622bc5350
- SHA512 54e054f3cd2852bcb25f42995a4827d1bed9c4afa1b26d17be02f471dfbab813ba8693f8b5bb36ae0ab1de744da7ea4c44204ddafe46767c73beef1781fd3594
- SSDEEP 3072:ESA5CJwdjKhZXNVF28P/lSTcW3LaBJlxIMOFTr1k2YC0QM7MIYRA9Mf+MuzbaIUt:qUe8bF2altW3UPy10TGOM2bUHN
- TLSH T17D64F7E0238808D5D6AB8A91DD668DE661B728F25B0E278E4F5CF4A03F0F593D5CDC16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10