d19114ceb9b4ec3f05fb80c5fa68ad0506e5873828958875daa945ad2854c621

Sharing

Copy URL Twitter E-mail

General

Target
claude-yolo-1.8-alpha.3.zip
Size 518KB
Sample260622-ry4bpsds8s
SHA256 d19114ceb9b4ec3f05fb80c5fa68ad0506e5873828958875daa945ad2854c621
MD5 bb9026a660179710721901fd9302b41a
SHA1 dc81ad6c18f844dae53c87a7be4a67ca0c02ef42
SHA512 8894fb30c19bded431eac033361d21431060ee5fe551c91e90fc374b0a96501b66eec2df9d7574f904341ca42a63e01c3e5a7154be825b738f4ea97e2e820106
SSDEEP 12288:NjXlNMiiXBZTXViRziobl9jcr91+rTY3r8qcfUhurk:dXR2BZr0RLbl2rKY3I38Mk
TLSH
T122B423856C682B73F541F98C1AC4342CD4202C3B9AB762DC5E8844D3647FB66BD6A9CB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

execution persistence

Malware Config

Targets

- Target
  Launcher.cmd
- Size 25B
- SHA256 783ac0a4b06c3ba4bdd7c7860ee10d50acaf6e3278e8dac5955529f69cbef299
- MD5 95630cee7b5510120e771387d6101865
- SHA1 858ab408d651791eb7672189842d85e6c4c7981f
- SHA512 7a22ed08db1efc096677eaecadddf9b56f500a859e6bca3562d8eb63f081cb5a757ebd37aa9c50ab1d005128098b04181b1c48289f458def72b7be4488a12e86
- MD5 SHA1 SHA512
Score

7^/10

execution persistence
- Executes dropped EXE
- Loads dropped DLL
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral1 behavioral2
- Target
  crtd.txt
- Size 301KB
- SHA256 c673467f7ace6dc9018db9328903cd44469301c76e7faa9814061c519a8404e0
- MD5 8e7c02a0b3848e2b398520ade2f55f05
- SHA1 5327c1fdea07a726b06e434140f0357b1de6459e
- SHA512 781cd02498d6982f5399b2ec7aefebb64b039d138350d7274cc89b0164a77aff9aeb3e7f883722f0d633f683f5c89cd7cb6fc66c0b1132d17ead7e17bd47919d
- SSDEEP 3072:CJAVvqx3H/gooYP5iw1AQmpOS2ctOPfBPNPcNWhpjeMl8GGOkQ/34x5nVCPDOtFY:T8+twYOctOxPakf/Qd5QLwwg7kJ
- TLSH
  T17B6408D8A0E509D2CAAB86D1DD238DAADABB75F1934A1B4A0F1CF5E437801D2D7CD805
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  lua51.dll
- Size 477KB
- SHA256 35eab985b1bb66e4624c3ab4147f4c3de2ab788673c7dcf4d2b750bf659da94c
- MD5 569b6b89d0126a695751f3e2bb3768a5
- SHA1 4a075bac9f3c763c9ef620c9ab871c93b28351e0
- SHA512 8d596af0d5ba815c428f9512f730506b86d6691f7575e8c0a12292a249b099f631311a3f433378db8590685f3be0ea0d4387dc73f557fc42cd8e1c78e41e6c69
- SSDEEP 12288:ugjU4useIZsjm+UWJ/dUi2H1c/LB2oum:ucG7jm+Dxdj2H1w2
- TLSH
  T1B2A46B49E6700969D96B8178C9574E0FD7BA780403609AEF47E0BBB72B33BD5163B324
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  luajit.exe
- Size 286KB
- SHA256 a8fc3de5033c191381033b8823596d32176ae48760a4ebcb673be2145aebcfa9
- MD5 7234a3d512de739b539e06d209838928
- SHA1 a568898d2845f86bef794f76cf1cbee049a6d1a7
- SHA512 72e39580fd18be46e14d51c602b4e6b4adb87d17a29af81fea571f66bf35e36563c843e04b83fd50f752701dd1f3def1a82d448cf11ceca70525a0fbdede07e0
- SSDEEP 3072:ArswOD2jjQ7nUN1GgbbMfKn49ro2tEMbrmEGBKbn5nYV+DMJR4:WrI24rEHbbMfKn49M2XO5BzYAJW
- TLSH
  T14A549E55A7A414F5DDB7823D8D46898BEBB2B8110764EACF03B041A67F277E04E3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8