General
- Target luaoptions.tar.xz
- Size 5KB
- Sample260709-pf6yrsa18s
- SHA256 8188cf3f6451dad71bc5fa0542c3664cf1a782c1db182b075018520dc989598f
- MD5 3dce4d30db2ff1e5f7216efe966c9af1
- SHA1 0a95c92489f625bb71e9747594d1f05b485fd2f7
- SHA512 fe3a71bf749678191ffa50d1a95d5c7034a8d517e78b20f85214f730f51e73bc8faa9b091309b02c1b4ad3009d3da62e845cf26de00367b9c07de0c9d4579999
- SSDEEP 96:TXVwgywfBDyJry1bktPiNbqAS9m7zqyviXGrDTX4E+nb0hRTQlKNXd:T3YFo8iNbqAS9OzlvT4E+7lKXd
- TLSH T14EC19D56F3987D0367E1970EBB4BCD1BE92A2A739E452988F4ACF78C4361608004CCE7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
tex/lualatex/luaoptions/luaoptions-lib.bat
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
tex/lualatex/luaoptions/luaoptions-lib.bat
Resource
win11ltsc2024-20260706-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
tex/lualatex/luaoptions/luaoptions.bat
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
tex/lualatex/luaoptions/luaoptions.bat
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target tex/lualatex/luaoptions/luaoptions-lib.lua
- Size 6KB
- SHA256 b493790777946cd132f77f433be123581124cf0e7d0f5520c187ab693ae28082
- MD5 4778fa3a826099a1e3ae6cc03be94b7f
- SHA1 c2c73bc3391bd8af49b29177cba96fcb98935e0c
- SHA512 92fc1bfd57e76bc7380bedcca3578940236fbc9142c8c766ada228ee74dc2dc0e82be0e7c8f59f51c34e3fa4bc8de090d9a8340bba91dcecbaefea1bcfeb1814
- SSDEEP 192:3Fc+l88zpPkgm6e5QtS2cI0UMT0uMqYAyUOEEtw+g:3e+6kmRqBGUMTh/yUft
- TLSH T102D1306ABD836232A353C954D84B4C54FB693467509CA068F48D81D03FA562DE2FEFB8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target tex/lualatex/luaoptions/luaoptions.lua
- Size 9KB
- SHA256 65090289857cf2745a6f04023f4fa2318ed799b626b2bce7972f7e7711637ff0
- MD5 741b36d3868753e7b479ccd408a4de3a
- SHA1 a11ec7614d5297ca9c4e40834ee660ea228c6b57
- SHA512 d34cfa8c5c5f8c60e09f650c6ff750d958f8557d39116eb9dd27c441576500a48ef40cc85d69e19b72cc9a936a468c54c6560a1fa76fb8fa6fb4b2766f36a6b8
- SSDEEP 192:nvqBHbozd1WK4qw/bWdbwOAEGiCbHT7wE/FY/uZtuz73fT4yAupU9BpQ:nvWkd14CdkOAv1z7wEmTsQ
- TLSH T18A2233596182233224D3A1DBD84E9801FA39D217755960A475CEC3E42F6222DF3FBAEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.