General
- Target LuaTools-win-Setup.exe
- Size 10.8MB
- Sample260626-2g7ynsfs3t
- SHA256 2df44509ea00be70885bce123aee1bbe3ab86498f6e0166c5bfe03ad600e8cda
- MD5 2e4a4c79ac7b58105459b1ad8ee8736d
- SHA1 e9928beebd76ab53e636dcf3baf3399da27d74ea
- SHA512 d07ea51dc8fca53250831e49f5e3b8f10616a0a123c0857fd43712ed286e81bcc536d1aee4a4f7f024fc03fdefd0d70189fa7cd5f8f9f85d6cddec3deb7ca904
- SSDEEP 196608:K4MyYfDTgGCFYrOUzSNP0yJS0bWjPf5CaV6xFK3qsN:iJfngqrxSNP/wlXMaV6L8qsN
- TLSH T1D1B60162FE42D0FBD48A01B5D43DB73DBA369E91872A85C34AA93C5CA8F1360585335F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
LuaTools-win-Setup.exe
Resource
win11ltsc2024-20260618-es
8 signatures
150 seconds
Malware Config
Targets
-
- Target LuaTools-win-Setup.exe
- Size 10.8MB
- SHA256 2df44509ea00be70885bce123aee1bbe3ab86498f6e0166c5bfe03ad600e8cda
- MD5 2e4a4c79ac7b58105459b1ad8ee8736d
- SHA1 e9928beebd76ab53e636dcf3baf3399da27d74ea
- SHA512 d07ea51dc8fca53250831e49f5e3b8f10616a0a123c0857fd43712ed286e81bcc536d1aee4a4f7f024fc03fdefd0d70189fa7cd5f8f9f85d6cddec3deb7ca904
- SSDEEP 196608:K4MyYfDTgGCFYrOUzSNP0yJS0bWjPf5CaV6xFK3qsN:iJfngqrxSNP/wlXMaV6L8qsN
- TLSH T1D1B60162FE42D0FBD48A01B5D43DB73DBA369E91872A85C34AA93C5CA8F1360585335F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.