General
- Target Complete-Course-Fast-Udemy-AP-The-Beginner-Advanced-v2.0.zip
- Size 573KB
- Sample260622-ryzcrads2j
- SHA256 6ec4b0d0ee6bee2d78c81ad89f648938eafe7fe6f04d0516dc209349e2e0692b
- MD5 7afac737c0bdcf5fc562c92fee3c3047
- SHA1 86b743caf14f9c82662c09f87b12bc7efd662c29
- SHA512 d6efbfff28b35fd37dab0521da7bcbfa9008b371b03ab897254b5289b3e3b61de6ef0292341970f1f063350907f6aa099a32fc9786c0a95f86d265f8514ee2dd
- SSDEEP 12288:yMU+0xq75aS9iYIp6cP/G2Bku6zXL9HXP427bk:K+J71vI/GzXhftHk
- TLSH T1DAC4231DA0547B51F64B6A78B323CDB09B29D03FD219C388A0840B399B5BE5B69CD376
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Launch.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Launch.bat
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral3
Sample
luajit.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
luajit.exe
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral5
Sample
x64.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
x64.js
Resource
win11ltsc2024-20260617-en
Malware Config
Targets
-
- Target Launch.bat
- Size 30B
- SHA256 592ec6f529721acbe07100c5386c58ca20fddfee7ac90280943fc2a61661e2be
- MD5 835e54a9b180e40f8137182a7a88987c
- SHA1 6df8fd5180820af17f0afb78565eeffcecb3e284
- SHA512 ce5809cb1ce1c19d7ce731e76802551390ca48b1dee5cfa425692c0a55cc4353e75e2d9587a6898d579510196dc939b1ee28472b2409fa06ee539ebb81839ba6
- MD5 SHA1 SHA512
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target luajit.exe
- Size 857KB
- SHA256 e69873a3ef03b289aba8a0ec7130247dc5f2a3ce8c3b647b44518a899f39f789
- MD5 44e1424e454a83dc395281d23977a795
- SHA1 18ad76619b23777794576ced7311f1c6ebb8d6fa
- SHA512 8fe3ac6a3c241863663b624d9e3ad6ffb9f5cf3acd3bdb754e0663206bdae1d3b5a8c02c7208e5851619f0168c8c4f036964a265981f3f1ab4da0a8e20ad2a89
- SSDEEP 12288:DL0c2HKju1FzLHUN2K19i5y4wcPXQY8NiUlneUuSy9w6/W0BCoqzmSra:V2HKmFzbIPA5y4FPXl8IUp9y9h+rf8
- TLSH T155158E58A67401F6D9A78134C9569A4BD7B2781207205AEF03E4AB773F33BE41E7B321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target x64.txt
- Size 299KB
- SHA256 d067cacea4ec623dc715c27ff7568d14988af0be1f3db32d332f27744114f9ba
- MD5 7ec21064c8800e9efb7d3992b2b4c559
- SHA1 0e9a5f99479482c1b0fca2f4801a34828c855d11
- SHA512 ccc36e0176300d4c487580c3db8a0a55cffe218778e2a2d80b00561b2e9f5f7d4a6dc2232f3713e4594a6117c8f6a8468ee82ee7139f7c97c781060806aad78d
- SSDEEP 6144:NtmevsvkH3yeYOEU3tm2YwP7uAJ4gvwDvXNDls1:vYVeWoT7zygvwbNg
- TLSH T13A64F7C0658C3896D9AB8AE1DD228EA651F724F2474E66CE0F5CF0F43650DA1D1DFD82
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10