d4901e8d9c68cdaa9f289b62704580b5f4dc31b2ec4fdaecaa09abb6a696e4d8

General

Target
Software-v3.1.zip
Size 504KB
Sample260713-cnbrdaa19j
SHA256 d4901e8d9c68cdaa9f289b62704580b5f4dc31b2ec4fdaecaa09abb6a696e4d8
MD5 7934b774b4273102ae463d92819b1e59
SHA1 dbdbca25840e77da1f601e14cb476459f520e52e
SHA512 82fab2a1ee5eb15cd06d8b1c47f5e14947e45b9f9fbe98c916c694fe3fc7543ae51356fe330798f5ce602d850378c915f4cf6f8b58cf91a063c384e8663379bc
SSDEEP 12288:NGRl4nbDDGIabs/7iiEVwYg2l3/2NHBy+wK8T:RTabs/7iiWw0KkxT
TLSH
T19AB423CE5A286CAC5BE95E834F5DBFDA2CF8413F862411F3F3581A14D4C956672A810E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery execution

Malware Config

Targets

- Target
  Launch.bat
- Size 23B
- SHA256 dce5fc61e153377bb42b53b7dfca841399dd5c94d5fdf2631617a6df8c7cded1
- MD5 b9c3f7efd325c8df5530424182106713
- SHA1 9248b0928bc5f821bdc8994b0b4ce244209fd65a
- SHA512 0f1b3c44291dd2bcd7ecc5ef8128f5282143794e539205942124551c2cd04c5e0e7914314963c203a7f905d89e5d52c02b4ee1806e41436efaf0ba593f389e85
- MD5 SHA1 SHA512
Score

6^/10

discovery
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral1 behavioral2
- Target
  luad.exe
- Size 636KB
- SHA256 88ec32a311b56441cfe6126b7780f073f36dfb8808de0dab9219d1a0be9c01ac
- MD5 b1535d38c1501d670ee19bfacdf12fd3
- SHA1 4ac9c168cb3942cd0840af555b2fb89543f0ef3a
- SHA512 70fe68bf2100fb0d33165226c265348734546e3ad6bb2555e8a00eb5793bfa77537cd141f2fa1da0a6237c55aa66d6c50535ef43426bfbfd0ec518efe7875dfb
- SSDEEP 12288:LZijeChH0qL/tXDiqPu9cLWO4YCxLSRyBLZN44:LZTiH0qL1Do+kYCxgl
- TLSH
  T1E9D4BF41B5D3C0B6D9B610704439AB7A5F7FAC210924DCAB83D839B68E306819F577BE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  rsp.json
- Size 303KB
- SHA256 acdd9ac3d55c4b1e12a239331145665d9eddf84a7a34fccac164f8afd006f875
- MD5 c73ba3c796aa5bbd96674feb2bc030e2
- SHA1 4ac4218f4a27bb1e0eb5e6d15c16d7c936eb7630
- SHA512 31361c2de346265e270984df12994a1952222e43389568eeaad19416d799f142ae75940c550dd92a81e5940650c1a3fc0f49e92d0ce22c62709a538890c469ff
- SSDEEP 3072:uU3p8rCWeonlssZKwGAHOTzcSE6Cakx9YlQB9PZ9SHL514zyGn0NKP2XtRenuRar:HpDmlsk4UODCnki9B9m14z1mvHSp
- TLSH
  T1B86417E0244819D5DAAB9683FCA34DFA29B764FCCA091B8E0F1DF8F53690594E5EDC01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6