25911bbfca1603bcf2aa5097cbf543d7cf77eb002e031fbacdf28447f65f1069

General

Target
js-leetcode-days-v1.0.zip
Size 573KB
Sample260622-ryzzaads3j
SHA256 25911bbfca1603bcf2aa5097cbf543d7cf77eb002e031fbacdf28447f65f1069
MD5 6fc30af4f68fb4a57f5c765f8c6c9721
SHA1 62fd71867e7e37e976bdae83053cbd966de1bad8
SHA512 490eb46bbb6012965ce2bcb56507075986d4c6b343f0b799f2ed93cf30acf8eca745f5cf80abe86710f5206f6a627bc40bc22d21f9d7b6c4b75e049f8402205a
SSDEEP 12288:5MU+0xq75aS9iYIp6cP/G2Bku8btNvC28c5/VTUPkYyc:9+J71vI/GBYc5/p8
TLSH
T1A5C4236D7018EB38E507A174F312C0F26BAE662BE0A5C39CD045053B37AFF26689D957
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

execution persistence

Malware Config

Targets

- Target
  Application.cmd
- Size 31B
- SHA256 af6f59bd3caee5daa2d6765dd8c1bc167060a9681617ee1e2aff32f1eda3477c
- MD5 9d89e86238700d16d0b5d111b7981807
- SHA1 c45389b8b7270241162783991258df825385025c
- SHA512 148dfcf7ebc0d9bbeffa767f27a2ed9a4e24a21bb5abdccffb798a366a190e58b0fed083c92da9ee08cd4e702508523ceaa1f326f2cd1f3d174495bacf526a8a
- MD5 SHA1 SHA512
Score

7^/10

execution persistence
- Executes dropped EXE
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral1 behavioral2
- Target
  luajit.exe
- Size 857KB
- SHA256 3595a6b226ce4daa0a28edea152b3a887c01f6323db1d082f6568c995cdefb55
- MD5 4ac8308d10c067f320d93b15644a8f09
- SHA1 43f1ae9d502facb1c85b278cc29868abc394de95
- SHA512 764439cc4da4d9f6eaeafa0e49e293a2b3c7b57406d99c018f6e80216838ea912ec5ac6acc86e8a14f8a2b5ad4a4e0a5bdd901cf17aca9591e5bf3addc66104b
- SSDEEP 12288:KL0c2HKju1FzLHUN2K19i5y4wcPXQY8NiUlneUuSy9w6/W0BCoTzmSra:I2HKmFzbIPA5y4FPXl8IUp9y9h+rY8
- TLSH
  T1BE158E58A67401F6D9A78134C9569A4BD7B2781207205AEF03E4AB773F33BE41E7B321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  static.txt
- Size 301KB
- SHA256 59c2115caf3104184de6cbc64c4029886b7302e1fa58acc910a2c567222e8616
- MD5 46d2bc500360833f1abd4e93aaa7feba
- SHA1 1a9715c11fe2648696caa4a5cd079410cd91ba35
- SHA512 b9344e80ce2aa53a9343543309e7bbff25eaa2f6c1c08dc898b8f8c5bd42d59c13c9625f9f0f9f1233890e06822e1b357bffd6fd5962e44b8ed90db201c719c4
- SSDEEP 6144:ACSKDaaSb8AWWCZi3xZ6XGL4DkHN5VjcoZcLoT65zecz:sJIWCZiBoXGL4DkHLV4oZizz3z
- TLSH
  T1C06408E0118829D5C6AB8692DD239CAB27B7A4F1474E1A8F4E4CF1F03B23591DDCEC56
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6