General
- Target Software.zip
- Size 395KB
- Sample260730-pm1eka1yay
- SHA256 d069c2eae59a5c7ad0c5de361220ff91ff228137812ed5cfd465df1a120ac3ea
Score
6/10
Malware Config
Targets
-
- Target Application.bat
- Size 23B
- SHA256 b4144587a8122e693c25dce818739cb9f13ba8392fbd770c227e4418b377de34
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target lua.exe
- Size 198KB
- SHA256 c21e21a708f5c4760577a760fcb62f73163af94cf44cb33d8a4d1bfa58421ea8
Score3/10 -
- Target lua51.dll
- Size 320KB
- SHA256 f95954e061ad9e37afacb0c849f249d196d0247be9277b899e6a9b295035c7a6
Score3/10