Overview

overview

6

Static

static

3

Launcher.cmd

windows10-2004-x64

6

Launcher.cmd

windows11-ltsc_2024-x64

6

clib.js

windows10-2004-x64

3

clib.js

windows11-ltsc_2024-x64

3

lua51.dll

windows10-2004-x64

1

lua51.dll

windows11-ltsc_2024-x64

1

luajit.exe

windows10-2004-x64

1

luajit.exe

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    GrammarFixer-2.5.zip
  • Size 1.3MB
  • Sample260713-cpc1tsbs4p
  • SHA256 afbfd06199df05f91cd5abc06e1891e8c31196d690ece548ade4cdcde5bfdbcc
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
execution

Malware Config

Targets

    • Target
      Launcher.cmd
    • Size 65B
    • SHA256 bdccd4dc851a934f221c3159ce21afae6b032f0e4a126354215c736c4d8097c3
    • MD5 SHA1 SHA512
    Score
    6/10

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2
    • Target
      clib.txt
    • Size 347KB
    • SHA256 0bfdc4089cfc6cb1403c50d2ccbd27f33bc17c9a72de694e678809b4ac5c7753
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral3behavioral4
    • Target
      lua51.dll
    • Size 3.4MB
    • SHA256 c7a657af5455812fb215a8888b7e3fd8fa1ba27672a3ed9021eb6004eff271ac
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral5behavioral6
    • Target
      luajit.exe
    • Size 98KB
    • SHA256 5343326fb0b4f79c32276f08ffcc36bd88cde23aa19962bd1e8d8b80f5d33953
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral7behavioral8

MITRE ATT&CK Enterprise v16

Tasks