General
- Target LuaTools-win-Portable.zip
- Size 6.8MB
- Sample260827-mtjz2stbkc
- SHA256 bfbd40443861823dee5ad801e058c2b69336e26c8cfddc407fa88e5aa85656f6
- MD5 ac3624d3515a9aaac7ce87deedc08217
- SHA1 63bf36db298c9a9a84a03dfda38754141fe5b676
- SHA512 8d74b9a602bfcadba95954f39ef258ccc49f17f83e84d3ada599ef5113c5fbc7f19cef8c001eb766aefb42ec0e6fc9fa6a27ec4e4168915b0e96673796c6b0e8
- SSDEEP 196608:4yjPnN4Sw6qZ3H1002mQF57ZF9rILn03t+6E4U+wi9:JjfN4Sw/3H14myJZDI70bUS
- TLSH T19176331E432C9AB6C15FD675413D09BFC282BB6E53D3376D013863D6AECEABD8608185
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
LuaTools.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
LuaTools.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
Update.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
Update.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target LuaTools.exe
- Size 489KB
- SHA256 9cd2c3c8cd279ee63a859996f10c3daf17e876fa04ed2a9571f32f4a97f1e1b7
- MD5 4947fae75c6395a05939fcef10b8220e
- SHA1 942cf49e6dc4dd19390bf8f09a3306adaff1e485
- SHA512 e699c93dd55bd295743dc8dbf54c1e1b2a36d014daf7be4898baae4d66cf76a32b4dbf07b96e278331c2dd9ab44f6511e3953c4104e275f212832572bf14a8a5
- SSDEEP 12288:eSJJkYLauS67aQ2UWIgXgCtgLz1uXe+OuhKDxiKgMZBF:9uuS6eeQXe+XTM
- TLSH T132B49D327B41C0B2E04770B19E3CD72DCB5AAF111716CAF36E9735BCCDB82914A62699
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
- Target Update.exe
- Size 3.8MB
- SHA256 b716430004afd2c1d2b8f191332541759f30d49fe19c49f671a241f68c3a468c
- MD5 9c559eb649f6aae84517e8311ce0478d
- SHA1 eb5735184f13c237c28c9b4e4deb8e3b8104e615
- SHA512 80a19e3b298ae7c1c6ff3ba01d5e770b584a782b9f818f8cd86321ebb26a93a98f46cbcaf2db5da31890e37357d40ff4e5a6a61eff163ed1cea06850f03fd0a6
- SSDEEP 49152:V0z1f+viTnGsRHs8jVrr3TZlzW1qmHVpFkSZC:S+v0ntHsOnaH
- TLSH T1E506BF62FF42D0F7C48A0175E42DF37D8636AE558B2A85C396A97C5CACF0270885739E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10