Overview

overview

6

Static

static

3

App.bat

windows10-2004-x64

6

App.bat

windows11-ltsc_2024-x64

6

icon16.js

windows10-2004-x64

3

icon16.js

windows11-ltsc_2024-x64

3

lua51.dll

windows10-2004-x64

1

lua51.dll

windows11-ltsc_2024-x64

1

resolver.exe

windows10-2004-x64

1

resolver.exe

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    Software-1.3.zip
  • Size 476KB
  • Sample260622-ryzzaads3n
  • SHA256 60ce96584b9e1b1a9217c6fa7375b51fc8404000ae869872ddc9cfd8835f4a89
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
execution

Malware Config

Targets

    • Target
      App.bat
    • Size 29B
    • SHA256 a96ffc9f649333f9e84b7a7e1101cf85f7a5f143253db1d7853e6e48d46b3c72
    • MD5 SHA1 SHA512
    Score
    6/10

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2
    • Target
      icon16.txt
    • Size 289KB
    • SHA256 33250ded61c43128b6c29b01de7b1cc962b241b236933f54bc42b648afae2398
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral3behavioral4
    • Target
      lua51.dll
    • Size 381KB
    • SHA256 c740061da4971cdf36a102637f80fc23dbff5769c1ec2156fcd90764237d51e2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral5behavioral6
    • Target
      resolver.exe
    • Size 282KB
    • SHA256 8fa25c75ee56eb3c4a2b0a6fe056c1e9f933e00596c6e3167e4727f01828168d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral7behavioral8

MITRE ATT&CK Enterprise v16

Tasks