Overview

overview

6

Static

static

3

Launch.bat

windows10-2004-x64

6

Launch.bat

windows11-ltsc_2024-x64

6

config.js

windows10-2004-x64

3

config.js

windows11-ltsc_2024-x64

3

lua51.dll

windows10-2004-x64

1

lua51.dll

windows11-ltsc_2024-x64

1

luajit.exe

windows10-2004-x64

1

luajit.exe

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    asset-recovery-tool-v1.7.6.zip
  • Size 1.3MB
  • Sample260822-ph4w7aywew
  • SHA256 0af99b94ca63947eeffe16eb87dbc8aa0837176d209e49015fe2e3fc64ef10b7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
discoveryexecution

Malware Config

Targets

    • Target
      Launch.bat
    • Size 47B
    • SHA256 1f60f53068049e7fe64a0c785071d5b57a5788746bf6f62076bd4974750e7a9a
    • MD5 SHA1 SHA512
    Score
    6/10
    discoveryexecution

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

      discovery
    behavioral1behavioral2
    • Target
      config.txt
    • Size 237KB
    • SHA256 919cd09f89463d01f4de23db3dad45ed65990bd2d6fde85c58410732922fb179
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral3behavioral4
    • Target
      lua51.dll
    • Size 3.4MB
    • SHA256 c7a657af5455812fb215a8888b7e3fd8fa1ba27672a3ed9021eb6004eff271ac
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral5behavioral6
    • Target
      luajit.exe
    • Size 98KB
    • SHA256 5343326fb0b4f79c32276f08ffcc36bd88cde23aa19962bd1e8d8b80f5d33953
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral7behavioral8

MITRE ATT&CK Enterprise v16

Tasks