410ed4b4ab0e6a5f3ee5a3b008ee5968877d4a0142b1674014a02851d94a16b2

General

Target
MC_web_1.2.zip
Size 534KB
Sample260622-ryzzaads3k
SHA256 410ed4b4ab0e6a5f3ee5a3b008ee5968877d4a0142b1674014a02851d94a16b2
MD5 33a72ca8d310e7bd0566dc6397379719
SHA1 93f57f17d3f4a60cd53a0cb6acaf6ed1c74befca
SHA512 288c38d492818e84e71134472315e5cde4117e54f835888600634eccbee899ce2fbdf5efa4886f6c0c8eeafd6465641127594998087546d77114a34c60b4136f
SSDEEP 12288:wOCBcIqB4liubzqtYBpfsz4TKPozt4CTo4Pl/2Ar5n:wZ+/ubzqyB9sz4TKPE1l/Zr5
TLSH
T1BDC4239603289664787407B197BF9F8DC6028E5329921BFD9FC8BF0CA1356489D5FBC2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

execution

Malware Config

Targets

- Target
  application.cmd
- Size 24B
- SHA256 037affc90a4bf1d6b5263756945fa92795f5a59630cab95ad17260711d023fd6
- MD5 3748cd334a64b8be2ab5fb31c7c8c403
- SHA1 c8685b932cb584ccef070098a59a8c32fe5f465f
- SHA512 cbf0f10b932ff4d4784f73f8ee8ce1d33043ef9f77f2bd7b5917c581d24e903af942e86c0d9534a9355b76ddfd875b9ab8150ace493bc3c57f43d39ad0de2308
- MD5 SHA1 SHA512
Score

6^/10
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral1 behavioral2
- Target
  ico64.txt
- Size 300KB
- SHA256 5762d9a95e545a70de685c3ae9e1d5bd6aeaae7615f5b8156da65e894a028009
- MD5 927cd1c732645b444374139b3de38857
- SHA1 93eba43520b7e99d74d59095d07c24a006a159a0
- SHA512 5afb07290a7a6674f5a364073f00c3f739180387d86e0c6a1d54edd088b47e8d95aa5b9eb8142633defd7c9ee04cd8780a83733cf0c05da96400c5044b86fc0a
- SSDEEP 6144:QdblPiZUKuxBA5jfKuDxhHzKJqbZhvSN6nnPaV6hkT5:5MojfKKbbZA3ikN
- TLSH
  T14E64F7E0F5C409B6DBEF8682DE6E8DAE15B724E2870A168E0E1DF4E03B151D1D7CDA05
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  luau.exe
- Size 753KB
- SHA256 5b2009af04c34eaa891b4fb57a7b79cb94b104ff7db2b3ba7eb66446db6bf929
- MD5 99ee2d496c71b1917130a677a68e4c33
- SHA1 c086e86ac35bc5e838804984c63dc1a2182bee69
- SHA512 509655eef24a4c4b7ee9a55fd2fae004ad7182f8055435670434f35fdd61a6d38c5ef89728ea65d087b6169caa326d2b5570ed093c97e921a78e20427fe5bca6
- SSDEEP 12288:YIxb6mgscIPv+xPBPx3ph7WfsnE6VTdUZ9nUt2ZvIX/19X7BrorkLwqG:RlRcIOXrh7dEiTWZC8gXTFX
- TLSH
  T1FCF49F19FBB101FAD5B78135CD16A90BEBB2BC050624566F43E06AAB6F377210E1F325
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

1

T1059

JavaScript

1

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Looks up external IP address via web service

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6