57d05cfa53bde1d91c6c2ab9383e7628acc83be5e4203f77d131a554916fccd6

General

Target
fx_revision_v3.7-alpha.2.zip
Size 573KB
Sample260622-ry4mgads8w
SHA256 57d05cfa53bde1d91c6c2ab9383e7628acc83be5e4203f77d131a554916fccd6
MD5 6ad57196021aa4201cdfbfae45dca83d
SHA1 ea9f759dac02212a038e41bae452c1cc3d265928
SHA512 36fabdb50490b62050fba0bc09b76a5ae5b1877d8a2000e69931a8a02d06596e86b74af1dc40ff20869a69db63cfaac0dada13dada7731a9065e58ca801fb864
SSDEEP 12288:j+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2bykH9I1P0QKw6FEu:j+QqldA/TSO713u7xnkH9IaQKHv
TLSH
T13FC4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B752698
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

execution

Malware Config

Targets

- Target
  Launcher.cmd
- Size 28B
- SHA256 ce1e33483d353200a266b3bc383ccf500e5a760c6dcd8218747260f5bbe39509
- MD5 fc3979a7ae6f3b0d64986c93b7911991
- SHA1 ab9685d1f483f40a5bd995173519a12473fa450f
- SHA512 83978961a0c623e9b98a300e0442a55c1796cea0bfd9085c0ba7f9ef1e9be6fd72585403783110e0b1f53bab70cd7038410cee0b84dca7eaa38884a08a441f77
- MD5 SHA1 SHA512
Score

6^/10
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral1 behavioral2
- Target
  luajit.exe
- Size 857KB
- SHA256 f3e34c9e36f3be065d80d456281d31dd1cc85eb4980db7fa8c1b0eb6f29c25d8
- MD5 bff3a81de5ffacbeddd5de793cede666
- SHA1 d49590bfb8b160595382339433535c481ce425ac
- SHA512 a8111d16ef3d1443dcef5511cb5151da2427ff47d9b2d2b759289a88f057702c4f5812b09cb84af2fb00e8da1ad82b478515efa08b44ec0ce9d3cee7e34c385d
- SSDEEP 12288:YL0c2HKju1FzLHUN2K19i5y4wcPXQY8NiUlneUuSy9w6/W0BCoJzmSra:22HKmFzbIPA5y4FPXl8IUp9y9h+r28
- TLSH
  T197158E58A67401F6D9A78134C9569A4BD7B2781207205AEF03E4AB773F33BE41E7B321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  uix.txt
- Size 302KB
- SHA256 8cede35b80b1deaf732c2b178d908f91b3e7a0c114d06dfae9075b8a9bf78b8f
- MD5 fe67c54a6387db6bf31f73ea6d695c12
- SHA1 97134dbb856b11be3b018508e980f58622bc5350
- SHA512 54e054f3cd2852bcb25f42995a4827d1bed9c4afa1b26d17be02f471dfbab813ba8693f8b5bb36ae0ab1de744da7ea4c44204ddafe46767c73beef1781fd3594
- SSDEEP 3072:ESA5CJwdjKhZXNVF28P/lSTcW3LaBJlxIMOFTr1k2YC0QM7MIYRA9Mf+MuzbaIUt:qUe8bF2altW3UPy10TGOM2bUHN
- TLSH
  T17D64F7E0238808D5D6AB8A91DD668DE661B728F25B0E278E4F5CF4A03F0F593D5CDC16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

1

T1059

JavaScript

1

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Looks up external IP address via web service

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6