General
- Target mev-sandwich-bot_v2.2.zip
- Size 1.3MB
- Sample260714-x9k76act9m
- SHA256 f27405704febf4d66f5842ffe1e343141a65e323b1918445b0e21faa14a55417
- MD5 7e7207268b799221852d95186bd68c76
- SHA1 d9d6da2914db18f61ba08b2c33481e8a6cf36aa5
- SHA512 1fc2b7dd667f4791697cbad29769641ca0d7b2857793a570be9271228e8bff68a94963f7aaf9b36e9b0eae6082331213b837de81ed57b7228440f7c566cdac9b
- SSDEEP 24576:gKBnBN7joZjxbq9j8XJlqrGAuImQIMESQ+hcqMXHC0Clwi6/CttWaR3:/BNvoZ9bq+MmMEL+hcjXHC/wnwd3
- TLSH T15A55338A817C24C88FB90B9367FF919CA2148EFC100304677B1A6997253EBDFCA7555B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Launcher.cmd
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Launcher.cmd
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
crt.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
crt.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
lua51.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
lua51.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
luajit.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
luajit.exe
Resource
win11ltsc2024-20260710-en
Malware Config
Targets
-
- Target Launcher.cmd
- Size 34B
- SHA256 8c1e1046322e8d84cbc9f464299a65841183b6b9dd62d813a063822615d9449c
- MD5 02b0c5686fd715a1ff342acb19b82c4f
- SHA1 5870b881858f6db3c1e2e845c49752f6a2dff053
- SHA512 94dce89c42878b0cd93024fae732c5dbd2ca16b210efc5b6828bcdb76851b894f10f4f08848cdc3183fe9326cf6e7f97ed2c89adc6cf0c937d71b06999e90fea
- MD5 SHA1 SHA512
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target crt.txt
- Size 332KB
- SHA256 fac94b13e7d5f4ebb694c0a2c01ad608c30a9b63b5a466e083ee2c29ece40124
- MD5 40f3e4445b24b2db3742a9293c74120f
- SHA1 14ec3fe43d96add6138c1d9ecb133747eb2e9f70
- SHA512 31626e4ffbe108c8350900a4e888f55e4f90df573288667aa162f2124ea3d87c20d5805dcd266829de6fa3a72d98bd47c89fe0ba5eb8a06c31026f85cca6a02a
- SSDEEP 6144:Pxdnq0fPSapGIvdmCfcCL4dKQGE8Cv7QWmkTXad4VxBobm3vC0kRacXrnuj3I75:Pxdq0LgEfcCL4dPDjhB9J3rY75
- TLSH T15A74C6ACA44C0CFD69DB8291DC7BAD9795B6C6FA034622870F2CE3A531A0165C7DDC87
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target lua51.dll
- Size 3.4MB
- SHA256 c7a657af5455812fb215a8888b7e3fd8fa1ba27672a3ed9021eb6004eff271ac
- MD5 4ebd617a3ad9a9619172bd14a902a400
- SHA1 270f66d2c84ee86ff4b07c6220c51abd4897b5f0
- SHA512 b008a00d7e57ef4786b14f28aee3880318820dd85d66539263a3f68b547e89bce8db32ad422d4eae6795219ec3ddcd72e7780aed9e725ed3c171d11492e47571
- SSDEEP 24576:QXEeYq+Fjb1h2Ac9qJqvqj+OhbaijGPDX732ywPKpQlABQFi8ePj40RvzinxO4xS:EEDv/2Ac9qB+OR4n3xBQKvjGQe11Fgl
- TLSH T129F54B49A7D1995AF112C2708E9B4375372BE410333B9FE76F8AE2203CD7AD8DD95602
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target luajit.exe
- Size 98KB
- SHA256 5343326fb0b4f79c32276f08ffcc36bd88cde23aa19962bd1e8d8b80f5d33953
- MD5 00f60ee3ff2dee681b5d7d442009b2c2
- SHA1 f5199b4191add11d02d58f521cbea21465b7ff6b
- SHA512 6e3754ec8596f3aaed92387c5bd56ee9d65fe54af6f44d2bc89b4df0f670e379137bc5eca5ba8aceb030bd4b45970b3c01f2132d1eef53f5070f9af4d4246562
- SSDEEP 1536:mmNzk2shF9CXUatIEqTIm4gKN2PwJy4wMUFA8:mmVvtQTKN64wHK8
- TLSH T1A9A3B5CBB6A44DAAF740423C80E6D321613FF6F0A6131B576A3476312F52B916DCB16E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10