ac3b79a6ccb08b442ec5e7a1d51760bf1e1691d5f7b132f10c6f15e15b96c1c7

General

Target
world_lingbot_3.1.zip
Size 569KB
Sample260622-rrg5wsds2w
SHA256 ac3b79a6ccb08b442ec5e7a1d51760bf1e1691d5f7b132f10c6f15e15b96c1c7
MD5 52a39e5a636f3a5a8532925d41558534
SHA1 4b311cf511a14f62879bb078f6ccd78e9ee0e2b6
SHA512 e903b5d58a527bd08fe960ceb189a41e4348ef1ea958925d73d4bf47d5c33041e3d6b46403f03dd6307aaa14cba21c21956f14351d14ff428c241e7a0638d0aa
SSDEEP 12288:u5W3ZqK4KU7pUTqfpOFfsc7PZWzB0or6vx:u2ZqK4H7S+fsFt0NJrs
TLSH
T172C423E84CC78A18DB79FD9982197C16F5EE0A311C0D39B5E4863A32CDDF3398920678
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

execution

Malware Config

Targets

- Target
  Application.bat
- Size 22B
- SHA256 8e322af81744217427abef3cab949aee1de70f1506f40e4e2d672af9e1f6ef0b
- MD5 3c5761b118ed15942be670b5c81811e9
- SHA1 b98ba9ba95824f1a95d39f7422bcedbed4371e20
- SHA512 e8d57da9d39aa27c2c7f30545468d1732a40c7e490932bd9c0a51e185ccd86bf5c1b866b90ac434c29402ba5046e6122174079c01e13e0bc6621ed5ede8cf51c
- MD5 SHA1 SHA512
Score

6^/10
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral1 behavioral2
- Target
  base.txt
- Size 338KB
- SHA256 c58720dcb30e5c887ff5bfd41bb46a611f2655128f1ef1a771e1745f24349dfe
- MD5 591ee71dcfc0f810fb33921c400e47ae
- SHA1 f0b67da6174f8c8662b34beba7930369cb96ddac
- SHA512 9d6c2e1143bd950c601cf59cc134934a2c8909f7bf02919154a73f0f87b4ffb90b70fdb10d9f877a8b0d3664b79f4565a12c9b9135611cd898e8d11a03819947
- SSDEEP 6144:lOhFlfou5G+vpaPidzpTrfoZiIc3vJY97NpHWlTj1m1:+J5GCaPijyiIc/CHpHeTj1m1
- TLSH
  T19B74B5A8E08C0AFF55FB8662DC2B9D8751BADAF4934577870F1CE1A271E0161C3DA847
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  lua.exe
- Size 860KB
- SHA256 b1d3e7e81016561faddf7b0a6cb9a3bd0174064b3b309c6948f5f1e6688a1381
- MD5 73c567b30d01312b68a7acf80a3314fb
- SHA1 463018b95dad283688ac588314c932accdc99d40
- SHA512 bbb52532ee59f639d4307186912f417f7da42c19e08615e945def32c3f7934081d4878634340e37f7dbbb9d1f2e1a051d03ffaaf8513214f4b2f2299b98cbdf3
- SSDEEP 12288:d1jeLwPDI0eF97VLJzZGMv2UzWIJn0X8cupaMKtdD5n9B7ow4Rkuz:zeLwLI0eF97bIMv2UaIR0Mcu96dxvKq
- TLSH
  T1AE158D59A67401F6C5BB81348956990BD7B2785207609BEF03E46BA73F33BE41E3B321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

1

T1059

JavaScript

1

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Looks up external IP address via web service

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6