General
- Target LE-cycle-GPI-1.3.zip
- Size 513KB
- Sample260713-cn29bsds2w
- SHA256 6c25d81de8621961084a263d1fcd2165c1d28c31ae0a12d02291914e0a4e9227
Score
7/10
Malware Config
Targets
-
- Target LaunchTool.cmd
- Size 30B
- SHA256 0476281e2ed8cca25b881092334c2aa7bca82c4be9819fcb9cefe8027e532f1e
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target lib_bit.txt
- Size 289KB
- SHA256 ead242a036f033f0829afa33768814be168ae29431d9de479e63a80c4cf9f431
Score3/10 -
- Target lua51.dll
- Size 477KB
- SHA256 ef224f48255771d28b15169d60c8b0a925875dba15b3bd245c0b34d77290120d
Score1/10 -
- Target vm_s390x.exe
- Size 286KB
- SHA256 1f546f1b4b2cd404fdd2ba9b52223ecf935ad26588993f703bef69db4c94034e
Score1/10