General
- Target Photography_Website_v3.5.zip
- Size 529KB
- Sample260801-ajkglstvhw
- SHA256 ce51c0ccaa6cdacff139051ec5a86342b8165ffe47b37c90a276e13ab1192026
- MD5 8f32d0d616ca44b110602bd5900fae5b
- SHA1 86c75832b8dae934e61d5bc00805f7c0cb97a8f6
- SHA512 08df1e4817875c7c0a061ce129936168ccf89c69645bb78029e8c3e4340da6af5f17a667462b65e808d5a9fd6079f92a4d6a6586ef0ad09db09e829b63bdd342
- SSDEEP 12288:kBRdpQ73iBVYW0CwvEXgbvM0a4OTHiQIIFzuK9Gd9IUb:kHUw2W19XgbM0azTHiQIouD3
- TLSH T1E3B423F5A7606BCC9D20122F2F4A27CE19374B41B403C54A1AD2875A421FAFF4E7AD9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Launcher.cmd
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
Launcher.cmd
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
lj_asm.js
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
lj_asm.js
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
util.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
util.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target Launcher.cmd
- Size 25B
- SHA256 05ae6b542fd187c062eac38abfbfb6a9b8f35bbec3aff29950912f7d89092c5a
- MD5 b714c11cb3306e44c8aa3fcf5b4739ae
- SHA1 b383381540546d52882fd232597d4f770c608cbf
- SHA512 4c24cf6da0ded6659a7925e5978def5fc1c77eb21e788090c4effb57949c0da84a4eb7f2096574c8912ca9825f737fc03d716eda0c2cd9eec87e6c38f05498ae
- MD5 SHA1 SHA512
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target lj_asm.txt
- Size 301KB
- SHA256 9ede2ff9c5c0016fba6c92a07534e6b71c8b875cf24a82016ef1fe8e4d48f47f
- MD5 c0f7424d5ebe27df42c3c94f2a577ac0
- SHA1 821a7598b07090f52957ee0c2d98005063df8230
- SHA512 8cc5a4fbd0e2a9e757b86485ea454bd04b957d1395902d3aa62c2e0df21afe6a2eeedafcc67fe6db1dcf655e1bec7ec3c57bb78d9f6d3f50fe1a76190a06c50c
- SSDEEP 3072:ItuuBoHnyBbixG4+vXQ9dLMh2mePNuUGC2RUjn97Fggsya2bYWBe9dA4FVrPWXZz:YiyZi3UgDLMh2FPvGYGmYW0C4Fw06
- TLSH T10E6418C020891D91DABB85D4DD2388A712B720F48BCA1EDF0E9CF6F4366C591C6EDD96
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target util.exe
- Size 711KB
- SHA256 0141e546ec16e5a2d0aac816932506aca117c3c59c7cc4d933441e1f92267079
- MD5 659da7be770ae2785ea38081ee2366a9
- SHA1 9eec91a661ea9106a17d54745560b8bb76bc3328
- SHA512 8d1fb1234cbd68dd04ff217e117848edce1b0628d7ad0cd51fb26ee198d5537b71f6e2dd9ff7a7b22b5bbbfbf577dc469345173dcb8a957d41e0c45d762ce8e5
- SSDEEP 12288:es2PKmvvaStJ7SSNYPffdsBJAcYkjWhkupHZYsKZt6YBEfN3:eOOasJ7SSNYXfdsBJAcrjmH+sKSv
- TLSH T141F4CF91B6D2C1F3D49211B144B9AB7B0E3D6D2007219CE793C43EB68E346D0AB7766E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2JavaScript
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1