General

  • Target
    the_cracks_whip_claude_3.0.zip
  • Size 451KB
  • Sample260731-apm5paaa33
  • SHA256 3af237e0e056eae782234987eb2b03665437bd4bae843c232f84dd113bfd4a1f
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Application.cmd
    • Size 24B
    • SHA256 305729e83fa3aaf806c72e3b656a7114748a1a75d7e391fb9529eb824c1923fb
    • MD5 SHA1 SHA512
    • Executes dropped EXE

    • Loads dropped DLL

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Target
      loader.exe
    • Size 31KB
    • SHA256 7ad4b911d05a12f91ab27ba3baa351a56653ca099dda7ad87ee2b94f8cd018c9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      lua51.dll
    • Size 587KB
    • SHA256 04d3c82782927330d56827ff551697666dbab4b3abf5b86bde492efdd142bc58
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      sdx.o
    • Size 293KB
    • SHA256 4c1ec56cc133765e635378a240e1a407d86898b325c05370634c6501938fecea
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks