Overview

overview

6

Static

static

3

Launcher.bat

windows10-2004-x64

6

Launcher.bat

windows11-ltsc_2024-x64

6

loader.exe

windows10-2004-x64

1

loader.exe

windows11-ltsc_2024-x64

1

lua51.dll

windows10-2004-x64

1

lua51.dll

windows11-ltsc_2024-x64

1

proto.js

windows10-2004-x64

3

proto.js

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    Basic-Azure-Data-Engineering-To-Advance-v3.2.zip
  • Size 480KB
  • Sample260622-ryznhsds2r
  • SHA256 1faff3e32ef3a2833b8af0ec089c40af455fe7f7f9de68d8f452995fe8368714
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
execution

Malware Config

Targets

    • Target
      Launcher.bat
    • Size 26B
    • SHA256 e1e6e28bc665b242fd4b496caf2542042d5720e87ea74551735664c202c486c7
    • MD5 SHA1 SHA512
    Score
    6/10

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2
    • Target
      loader.exe
    • Size 282KB
    • SHA256 fad3d429172932b72e50f52af169a80439464e3538d97810509090e2e6cdf32a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral3behavioral4
    • Target
      lua51.dll
    • Size 381KB
    • SHA256 440ceb0dc5911faca54ed9a4dd186dad3d006ae4f52d0bb7d1e4b4edd8c3693a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral5behavioral6
    • Target
      proto.txt
    • Size 301KB
    • SHA256 e450152d8dd9f7d2d92dbd53461a38ee8f154b69b2558ed43b5d3f603a43240a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral7behavioral8

MITRE ATT&CK Enterprise v16

Tasks