Overview

overview

6

Static

static

3

Application.cmd

windows10-2004-x64

6

Application.cmd

windows11-ltsc_2024-x64

6

loader.exe

windows10-2004-x64

1

loader.exe

windows11-ltsc_2024-x64

1

lua51.dll

windows10-2004-x64

1

lua51.dll

windows11-ltsc_2024-x64

1

module.js

windows10-2004-x64

3

module.js

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    ai-rpa-v2.9.zip
  • Size 451KB
  • Sample260622-rzbm3sdv2x
  • SHA256 a5dda7f11164530e9d9facd7121e319dbfcba97786e76197943d103b3703e386
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
execution

Malware Config

Targets

    • Target
      Application.cmd
    • Size 31B
    • SHA256 4b1c2de95216097702c9e078ec721c99442cdb31128034267e1015cad71d6fcb
    • MD5 SHA1 SHA512
    Score
    6/10

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2
    • Target
      loader.exe
    • Size 31KB
    • SHA256 7ad4b911d05a12f91ab27ba3baa351a56653ca099dda7ad87ee2b94f8cd018c9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral3behavioral4
    • Target
      lua51.dll
    • Size 587KB
    • SHA256 04d3c82782927330d56827ff551697666dbab4b3abf5b86bde492efdd142bc58
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral5behavioral6
    • Target
      module.cso
    • Size 291KB
    • SHA256 7d1bf2e9b6085e67b36b396f33b9ddb88ad4d0192af8bc5e39c89673aac87b8c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral7behavioral8

MITRE ATT&CK Enterprise v16

Tasks