General
- Target Wrapped_Git_Hub_1.0.zip
- Size 573KB
- Sample260622-ryvpkac17r
- SHA256 324f1bff6ffd4723403963f6c5878ece404dfa78d634fee282cd838d736f6926
- MD5 64d0526f07a93ef727ffc076eaadc5b9
- SHA1 073d14c6a723a40db9593b3bbbb415632cf7c41b
- SHA512 e73f809717ce77f9fadcb8a960f9856d32231f0c50ab712d0a71bdbe189d5b3600002beda5395575c7c571f3675ea8cb5c6f873de8c0f37d6c118e18864c602d
- SSDEEP 12288:RMU+0xq75aS9iYIp6cP/G2Bku80tNvC28c5/VTUPkYyN:V+J71vI/GaYc5/pt
- TLSH T16EC4235D7018EB38E907A174F312C0F26BAE662BE0A5C39CD045053B37AFF26689D957
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Application.cmd
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Application.cmd
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral3
Sample
luajit.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
luajit.exe
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral5
Sample
static.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
static.js
Resource
win11ltsc2024-20260617-en
Malware Config
Targets
-
- Target Application.cmd
- Size 31B
- SHA256 af6f59bd3caee5daa2d6765dd8c1bc167060a9681617ee1e2aff32f1eda3477c
- MD5 9d89e86238700d16d0b5d111b7981807
- SHA1 c45389b8b7270241162783991258df825385025c
- SHA512 148dfcf7ebc0d9bbeffa767f27a2ed9a4e24a21bb5abdccffb798a366a190e58b0fed083c92da9ee08cd4e702508523ceaa1f326f2cd1f3d174495bacf526a8a
- MD5 SHA1 SHA512
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target luajit.exe
- Size 857KB
- SHA256 3595a6b226ce4daa0a28edea152b3a887c01f6323db1d082f6568c995cdefb55
- MD5 4ac8308d10c067f320d93b15644a8f09
- SHA1 43f1ae9d502facb1c85b278cc29868abc394de95
- SHA512 764439cc4da4d9f6eaeafa0e49e293a2b3c7b57406d99c018f6e80216838ea912ec5ac6acc86e8a14f8a2b5ad4a4e0a5bdd901cf17aca9591e5bf3addc66104b
- SSDEEP 12288:KL0c2HKju1FzLHUN2K19i5y4wcPXQY8NiUlneUuSy9w6/W0BCoTzmSra:I2HKmFzbIPA5y4FPXl8IUp9y9h+rY8
- TLSH T1BE158E58A67401F6D9A78134C9569A4BD7B2781207205AEF03E4AB773F33BE41E7B321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target static.txt
- Size 301KB
- SHA256 59c2115caf3104184de6cbc64c4029886b7302e1fa58acc910a2c567222e8616
- MD5 46d2bc500360833f1abd4e93aaa7feba
- SHA1 1a9715c11fe2648696caa4a5cd079410cd91ba35
- SHA512 b9344e80ce2aa53a9343543309e7bbff25eaa2f6c1c08dc898b8f8c5bd42d59c13c9625f9f0f9f1233890e06822e1b357bffd6fd5962e44b8ed90db201c719c4
- SSDEEP 6144:ACSKDaaSb8AWWCZi3xZ6XGL4DkHN5VjcoZcLoT65zecz:sJIWCZiBoXGL4DkHLV4oZizz3z
- TLSH T1C06408E0118829D5C6AB8692DD239CAB27B7A4F1474E1A8F4E4CF1F03B23591DDCEC56
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.