Overview

overview

6

Static

static

3

Application.bat

windows10-2004-x64

6

Application.bat

windows11-ltsc_2024-x64

6

lsp.js

windows10-2004-x64

3

lsp.js

windows11-ltsc_2024-x64

3

lua51.dll

windows10-2004-x64

1

lua51.dll

windows11-ltsc_2024-x64

1

util64.exe

windows10-2004-x64

1

util64.exe

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    private_relay_gas_v1.5.zip
  • Size 456KB
  • Sample260622-ry7dcsdt4z
  • SHA256 6ee7e21d19c0da0e299510f491bcfabe0f1d77759ba0878c60211a295a9b6cb2
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
execution

Malware Config

Targets

    • Target
      Application.bat
    • Size 26B
    • SHA256 236d918f2c949603eb4a862f1987d265a2d478a3f25daee8e72b24457a1e5911
    • MD5 SHA1 SHA512
    Score
    6/10

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2
    • Target
      lsp.txt
    • Size 302KB
    • SHA256 ca27cac4f1c16da48671deaf3b2b1035137f05633e15d524ddd1df4a9667fbb7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral3behavioral4
    • Target
      lua51.dll
    • Size 587KB
    • SHA256 04d3c82782927330d56827ff551697666dbab4b3abf5b86bde492efdd142bc58
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral5behavioral6
    • Target
      util64.exe
    • Size 31KB
    • SHA256 7ad4b911d05a12f91ab27ba3baa351a56653ca099dda7ad87ee2b94f8cd018c9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral7behavioral8

MITRE ATT&CK Enterprise v16

Tasks