General
- Target 15072026_0435_Application.cmd.zip
- Size 463KB
- Sample260715-e7p48abx5j
- SHA256 2aa558fda09b9dc32ee82e86afc2d5ffe7e5316235477f6b6d64b6b4ad9aa143
Score
7/10
Malware Config
Targets
-
- Target Application.cmd
- Size 26B
- SHA256 fa37d1116997938a9e57dbb24af2cbf229ea152c6fc61a2fd90448cc5defa3d8
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target lua51.dll
- Size 587KB
- SHA256 04d3c82782927330d56827ff551697666dbab4b3abf5b86bde492efdd142bc58
Score1/10 -
- Target luau.exe
- Size 31KB
- SHA256 7ad4b911d05a12f91ab27ba3baa351a56653ca099dda7ad87ee2b94f8cd018c9
Score1/10 -
- Target msgpack.txt
- Size 316KB
- SHA256 bf9d1c0b1a62bab2a410ad849604dab362fac73e6c1111bdfe78707ed819560e
Score3/10