General
- Target Release_x64.zip
- Size 489KB
- Sample260710-pbq2raa12j
- SHA256 3ab5ae6e34d35977cf218c785b184425851f94202092d1bcfb1a2cc44a30bfe5
Score
6/10
Malware Config
Targets
-
- Target Application.bat
- Size 2KB
- SHA256 2ee82e6b77cfc3a7649b24a438befeae8743e8d9d0eb09389fc789d0cb65479c
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target config.txt
- Size 232KB
- SHA256 4b1ba932f06251267820b1af5f0a533f869e809bb9c6a1729a8097553d2f874e
Score3/10 -
- Target lua51.dll
- Size 592KB
- SHA256 ff976f6e965e3793e278fa9bf5e80b9b226a0b3932b9da764bffc8e41e6cdb60
Score3/10 -
- Target luajit.exe
- Size 89KB
- SHA256 1cf20b8449ea84c684822a5e8ab3672213072db8267061537d1ce4ec2c30c42a
Score3/10