Overview

overview

6

Static

static

3

LaunchTool.cmd

windows10-2004-x64

6

LaunchTool.cmd

windows11-ltsc_2024-x64

6

lib_bit.js

windows10-2004-x64

3

lib_bit.js

windows11-ltsc_2024-x64

3

lua51.dll

windows10-2004-x64

1

lua51.dll

windows11-ltsc_2024-x64

1

vm_s390x.exe

windows10-2004-x64

1

vm_s390x.exe

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    cd_ci_v1.0.zip
  • Size 513KB
  • Sample260622-ry5vjadt2w
  • SHA256 97eee357a1c70fd7060def7a17a09d44abb16b9af80c7229bd99d9dd6ce7d5d5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
execution

Malware Config

Targets

    • Target
      LaunchTool.cmd
    • Size 30B
    • SHA256 0476281e2ed8cca25b881092334c2aa7bca82c4be9819fcb9cefe8027e532f1e
    • MD5 SHA1 SHA512
    Score
    6/10

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2
    • Target
      lib_bit.txt
    • Size 289KB
    • SHA256 ead242a036f033f0829afa33768814be168ae29431d9de479e63a80c4cf9f431
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral3behavioral4
    • Target
      lua51.dll
    • Size 477KB
    • SHA256 ef224f48255771d28b15169d60c8b0a925875dba15b3bd245c0b34d77290120d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral5behavioral6
    • Target
      vm_s390x.exe
    • Size 286KB
    • SHA256 1f546f1b4b2cd404fdd2ba9b52223ecf935ad26588993f703bef69db4c94034e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral7behavioral8

MITRE ATT&CK Enterprise v16

Tasks