General

  • Target
    luaoptions.tar.xz
  • Size 5KB
  • Sample260709-pf6yrsa18s
  • SHA256 8188cf3f6451dad71bc5fa0542c3664cf1a782c1db182b075018520dc989598f
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      tex/lualatex/luaoptions/luaoptions-lib.lua
    • Size 6KB
    • SHA256 b493790777946cd132f77f433be123581124cf0e7d0f5520c187ab693ae28082
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      tex/lualatex/luaoptions/luaoptions.lua
    • Size 9KB
    • SHA256 65090289857cf2745a6f04023f4fa2318ed799b626b2bce7972f7e7711637ff0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v16

Tasks