General
- Target crack_Hash_v3.4.zip
- Size 504KB
- Sample260730-wzn1maxxd1
- SHA256 77295c1e6f50535c6063567e745317f11fd7b565d769f5e2aded80d3ddd3d454
Score
7/10
Malware Config
Targets
-
- Target Launch.bat
- Size 23B
- SHA256 dce5fc61e153377bb42b53b7dfca841399dd5c94d5fdf2631617a6df8c7cded1
Score7/10-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target luad.exe
- Size 636KB
- SHA256 88ec32a311b56441cfe6126b7780f073f36dfb8808de0dab9219d1a0be9c01ac
Score3/10 -
- Target rsp.json
- Size 303KB
- SHA256 acdd9ac3d55c4b1e12a239331145665d9eddf84a7a34fccac164f8afd006f875
Score3/10
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2JavaScript
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1