General
- Target LuaTools-win-Setup.exe
- Size 11.3MB
- Sample260919-yeacvaxtfs
- SHA256 f6bd024595477dfce071bdb5ba244f16f04beaddc610628be675891cf8066732
- MD5 860ba574cc15cb29375ca010a1b27925
- SHA1 14764178320d68ce077d9f3eff326a5bd9f4c24b
- SHA512 807e9cdb1653cc7d2991c0a87b1095652afd406e854ec34c8cbf0e29fa1aacfccc8f21af6a80d28d430a0cfca96e204d82e1980e1df88b1fba75cf9dc4c69038
- SSDEEP 196608:K4MyYsDTgGu2s+0040yF5NF9jPnN4Sw6qHn3ILn03t+6E4Ud519Y:iJsngan60ojF9jfN4SwVI70bUzHY
- TLSH T154C60162FF02D0FBD48A01B5D43EB73DBA369E95872A85C34A99385CA8F1270585335F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
LuaTools-win-Setup.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
LuaTools-win-Setup.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target LuaTools-win-Setup.exe
- Size 11.3MB
- SHA256 f6bd024595477dfce071bdb5ba244f16f04beaddc610628be675891cf8066732
- MD5 860ba574cc15cb29375ca010a1b27925
- SHA1 14764178320d68ce077d9f3eff326a5bd9f4c24b
- SHA512 807e9cdb1653cc7d2991c0a87b1095652afd406e854ec34c8cbf0e29fa1aacfccc8f21af6a80d28d430a0cfca96e204d82e1980e1df88b1fba75cf9dc4c69038
- SSDEEP 196608:K4MyYsDTgGu2s+0040yF5NF9jPnN4Sw6qHn3ILn03t+6E4Ud519Y:iJsngan60ojF9jfN4SwVI70bUzHY
- TLSH T154C60162FF02D0FBD48A01B5D43EB73DBA369E95872A85C34A99385CA8F1270585335F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.