General
- Target the_cracks_whip_claude_3.0.zip
- Size 451KB
- Sample260731-apm5paaa33
- SHA256 3af237e0e056eae782234987eb2b03665437bd4bae843c232f84dd113bfd4a1f
- MD5 5d0e76c0bb9afaa8830329a1e1b83a69
- SHA1 6d27bc410a5cc2c56a4d8bf2107e9174c803b951
- SHA512 e9c51de61c720dfcbf06db43ca15862ec3576b5de741eb25e1c90014ad5fa602462e98b8d30632cf7a6b113c00d3bddb774423ee226a51c5d55de3dba1dd09e0
- SSDEEP 12288:WzYfcEaN9B/Jm0LU0gM7aQdYyvZJHJmWT:dfclN9BhmSH75vZJHgWT
- TLSH T1AFA4232CADE106503D67BF403D8C5F024A34A15BB6F9EAA6251F3F888CEFC6C156964D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Application.cmd
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Application.cmd
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
loader.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
loader.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
lua51.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
lua51.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
sdx.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
sdx.js
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target Application.cmd
- Size 24B
- SHA256 305729e83fa3aaf806c72e3b656a7114748a1a75d7e391fb9529eb824c1923fb
- MD5 f45aee771c5a0f9976d9fa2ee54d53d4
- SHA1 ce10a7578124a414ed2adb1d606449b6f703aea7
- SHA512 6b2a07dc33c4ee728af7ddfebaa0b8265aa9dc375d7f4ef8cc876eda2d5a4a84eb5e12c7ae708fbc0ddee59bc5ca655df2b80d59ed09451c6c902365e72ed67c
- MD5 SHA1 SHA512
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target loader.exe
- Size 31KB
- SHA256 7ad4b911d05a12f91ab27ba3baa351a56653ca099dda7ad87ee2b94f8cd018c9
- MD5 c2a7f19ba96dc460d591d37d664fe6aa
- SHA1 2e930eb7072ac6f8906c5df11e041d88aaea1fcd
- SHA512 baf23c903b68e13786657cf1bcfc6db55493988eac28edc3caaee1011f65ff04eebef9e204853a3abf07d4a36ad7ef5bb8a3683863fac600b49590d7376624ad
- SSDEEP 384:ib7da2Z2gMMu7VGueXHa2RIC23208fKUS5CWhYJ8L:Wa2JLuZ/eXaIO3r8iuWhYyL
- TLSH T138E2C62DB68258DEC591D27CA0D60731F079BD56172766BE1308F23A7E21AA1CB3F427
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target lua51.dll
- Size 587KB
- SHA256 04d3c82782927330d56827ff551697666dbab4b3abf5b86bde492efdd142bc58
- MD5 82e81158366a953c33d0720dfe34b95b
- SHA1 4b5eee1d2ba5bf3ca0389c0415626634c640a4bd
- SHA512 3c9f7360bafc48d573d24fe1612e23a97fe08944c9ad5f5d46818d5e74365d00d7e5aeee63391d4c0de7390b5fecaa695b698fd62ccc741dec181f0d24ee82af
- SSDEEP 12288:Psx+0xTI82jcKvyp9jvgEXXBKHKLx2h601BqStQIF3yB:OrmyXMKF2hXBtQIF3yB
- TLSH T173D4160BA6B362BCC267C134879B8BB1B931BC5402346DBF55A0E7311E71E91179FA39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target sdx.o
- Size 293KB
- SHA256 4c1ec56cc133765e635378a240e1a407d86898b325c05370634c6501938fecea
- MD5 e2ff43c4d1dd476401313f92012e83c6
- SHA1 214b3d3c56b8434ac6579840a4327f1d4d22571d
- SHA512 820df12653fc80393278b4d1a5041eac288d8552523a8c7c2d23b1df3c6b7b63040258662d0877003640b87a30a9219bd7144a988d8b54a8231e05c5139e279c
- SSDEEP 3072:ZKJ2q9pI/ySnGerWJzzousbmV6iHyQ8tPBIFPG4ayoBjw2rj45unPxvaSlFh8s7a:s/kgJzhvNJKBie4aHVj45uVLqU9Y
- TLSH T1EB54F8D0218810E5EAEB859DDC6A8EA761B724F18B07168BCF1CF4B837542E1DECDC56
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10