06982c90c034dfdeabf47e20ff277b292d2685b7f00e32558667546a0333520e

Sharing

Copy URL Twitter E-mail

General

Target
31072026_0409_Application.cmd.zip
Size 463KB
Sample260731-eqz8vstekb
SHA256 06982c90c034dfdeabf47e20ff277b292d2685b7f00e32558667546a0333520e
MD5 51fe16354e7fcf32088e42bfd4634401
SHA1 93f1f9a44e4e7b36fd5aef3103066bed49138020
SHA512 18abbad2ecc681d97cd8e4c83e2151ee7aa914406e9ac4159bd93c08d3b9dbab59b9baaf34040920bc22b2b8ad58f1aa82e6ba1e503abce38cff0a58ff061aba
SSDEEP 12288:vzYfcEaN9B/Jm0LU0gM7aQdfQzDNGAhyH:MfclN9BhmSHyPG
TLSH
T142A4236C8B520661BC6736501C583F470B60EC233BED99E5D60F2A91CAEFC644BC56EE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Application.cmd
- Size 26B
- SHA256 fa37d1116997938a9e57dbb24af2cbf229ea152c6fc61a2fd90448cc5defa3d8
- MD5 1b1565b6f8cb1348cf5737c97dcc848d
- SHA1 4fbd477183e32da45f341be108c18c5e8c7734f0
- SHA512 57d390a394c88d4bef57bda45662e79924d642dfb50c8a6a2d65f6b593aa35d392a1125c5bcfa336232a1cf3c79fdfccf274c321438a78dee4205254a7b3ec0f
- MD5 SHA1 SHA512
Score

7^/10

discovery execution persistence
- Executes dropped EXE
- Loads dropped DLL
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
  discovery
behavioral1 behavioral2
- Target
  lua51.dll
- Size 587KB
- SHA256 04d3c82782927330d56827ff551697666dbab4b3abf5b86bde492efdd142bc58
- MD5 82e81158366a953c33d0720dfe34b95b
- SHA1 4b5eee1d2ba5bf3ca0389c0415626634c640a4bd
- SHA512 3c9f7360bafc48d573d24fe1612e23a97fe08944c9ad5f5d46818d5e74365d00d7e5aeee63391d4c0de7390b5fecaa695b698fd62ccc741dec181f0d24ee82af
- SSDEEP 12288:Psx+0xTI82jcKvyp9jvgEXXBKHKLx2h601BqStQIF3yB:OrmyXMKF2hXBtQIF3yB
- TLSH
  T173D4160BA6B362BCC267C134879B8BB1B931BC5402346DBF55A0E7311E71E91179FA39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  luau.exe
- Size 31KB
- SHA256 7ad4b911d05a12f91ab27ba3baa351a56653ca099dda7ad87ee2b94f8cd018c9
- MD5 c2a7f19ba96dc460d591d37d664fe6aa
- SHA1 2e930eb7072ac6f8906c5df11e041d88aaea1fcd
- SHA512 baf23c903b68e13786657cf1bcfc6db55493988eac28edc3caaee1011f65ff04eebef9e204853a3abf07d4a36ad7ef5bb8a3683863fac600b49590d7376624ad
- SSDEEP 384:ib7da2Z2gMMu7VGueXHa2RIC23208fKUS5CWhYJ8L:Wa2JLuZ/eXaIO3r8iuWhYyL
- TLSH
  T138E2C62DB68258DEC591D27CA0D60731F079BD56172766BE1308F23A7E21AA1CB3F427
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  msgpack.txt
- Size 316KB
- SHA256 bf9d1c0b1a62bab2a410ad849604dab362fac73e6c1111bdfe78707ed819560e
- MD5 32144c1de297b573901bc00c04965472
- SHA1 021ca62fd84bac67946f0131318e283fbe0cee1e
- SHA512 eb76b736cbf21511443c7c625e006049adef1974b77fa1660ec5016b17c68a3e7b3d72a0e22449159f44c22af41ac581316d4e545b22773d7ade957aa2375e4b
- SSDEEP 6144:x7n4M2IUIuVMmmisNrO352ocWttq4c40OXi:x7n47Ijmm/05Agy
- TLSH
  T1FA6407DC504428D4DBAB8B89DD62DEA6217774F1470EE68E0F0CF0F436695A1DACDC2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8