General
- Target rock_breaker_v1.9.zip
- Size 529KB
- Sample260809-pjswbaxfkb
- SHA256 677b060d0597ca7a017b6759769fdb629ba4e33b95e7c3354eda664c989b2e8b
- MD5 960256e0783b93dd25dc733066298d52
- SHA1 484ba5f43aa2f6075c1d8232eea998260dce5669
- SHA512 5f6daadcecc1a8e2d61305a8f802e3aa6b939a0c0605b46d4ba6d0ad7be5fbae0a086c8bfca2cbb3b055b9f1043793907b2df340f75f28b7c96252e6735e6f90
- SSDEEP 12288:27JZAaFpeBqO3g/ALyYG0ZaDajTCXMO8xzDOe3Wc:OLpeRA/f0Za6TCXKBxmc
- TLSH T194B42369227F71900C7543A94B468124FC3E5EB2AE00DD93EDDCAB4D8F5BB195638E0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Launcher.cmd
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Launcher.cmd
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Behavioral task
behavioral3
Sample
bytecode.js
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
bytecode.js
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
gcm.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
gcm.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target Launcher.cmd
- Size 26B
- SHA256 3f4c88d65a5b792d3234a8cb966154550f1d9b9eaefd2474c01f97b21f46733c
- MD5 cf304da0c9eadcdbe38ebe7e5d005be5
- SHA1 2c199e7c209bc250c1fe762cf66d0872cdd8541b
- SHA512 ecdbf6b1a349a816958f90a2edaf2acdabe01e7ee1ba44f4fa1a4e36495d80b8883f3b4f988174a9a3379428b82ca8d001d22b967c9ac18a6718dc5fa0306450
- MD5 SHA1 SHA512
Score7/10-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target bytecode.txt
- Size 292KB
- SHA256 35d19eba58c4db6e034e7965ac41a2b02a26f26ca9cfcfb5ec8cb1690ec86c5e
- MD5 61b31acc14f126f5ce3692a52e374952
- SHA1 6b4c2b778419843a3a8df142479f6ddcad34c331
- SHA512 2254fb51e6fa3c249820c67706cdafdac38fea8043acaccc1781f35fe5394cc1b277e082e69e9246d981540662d7e4755f40b6370922388573fc6f61b1265fe6
- SSDEEP 3072:OjQnaGjewTWqwOqX9E5s650QllqpvsunFS1BjWC7ojS4l5qWaves5:dYuRqAqtsGFEJWnOb
- TLSH T14554F7F1648C08D1DAAB8694DC7EEDA7127725F14B4A268BCF1DF4E83750690CADEC06
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target gcm.exe
- Size 753KB
- SHA256 4c469dadda5529047b063dd2e91ec36c409b4cbe6cf3576ae7db02e79e4d51f7
- MD5 4b4e5b23962b294bc3699ffccc85b7c2
- SHA1 1d26e2bc9f12734e82d174fee5767e7b8be91d6e
- SHA512 8cac7e740626f2ccfd8b9524423d19c89624cb70d532a0c563df6a0be51eeeda1c7124699bd91fe648cb339688846192ddcdc0c123168e0226ea36728265a5c5
- SSDEEP 12288:6Ixb6mgscIPv+xPBPx3ph7WfsnE6VTdUZ9nUt2ZvIX/19X7BroFkLwqG:LlRcIOXrh7dEiTWZC8gXTFF
- TLSH T128F49F19FBB101FAD5B78135CD16A90BEBB2BC050624566F43E06AAB6F377210E1F325
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10