General
- Target FiveM-LUA-EXECUTOR-main.zip
- Size 37KB
- Sample260922-v4knbszdpc
- SHA256 553576b851b7d8fc63cf20c63599a1ccf3f091a3e7985ab0662835eb10c1ba4d
Malware Config
Targets
-
- Target FiveM-LUA-EXECUTOR-main.zip
- Size 37KB
- SHA256 553576b851b7d8fc63cf20c63599a1ccf3f091a3e7985ab0662835eb10c1ba4d
Score1/10 -
- Target FiveM-LUA-EXECUTOR-main/Aimbot.hpp
- Size 11KB
- SHA256 ed54909602142b450bb79ee3a03efd4cee0ed4249cd01b3043ae818e14919195
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target FiveM-LUA-EXECUTOR-main/Classes.hpp
- Size 19KB
- SHA256 dc6b29ef192424ae26421200d3f7e270af2c6065358e14e88a7b7d3da0ba26e4
Score3/10 -
- Target FiveM-LUA-EXECUTOR-main/Core.cpp
- Size 8KB
- SHA256 6ba824ad991fee0e7337d88b3dca5f1f71c10dba4023b65ce37da58bc4dcc8f2
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target FiveM-LUA-EXECUTOR-main/Core.hpp
- Size 78B
- SHA256 828f867c968fe7daf1163d1f607bed3d6095b183888b5d41f2d1213c71c3eb89
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target FiveM-LUA-EXECUTOR-main/CustomWinApi.hpp
- Size 2KB
- SHA256 3345ba28cdb24ca73b3e3d3b4aa72ad623cdd478b7bff31e0faccf57f362ec7b
Score3/10 -
- Target FiveM-LUA-EXECUTOR-main/LICENSE
- Size 11KB
- SHA256 c71d239df91726fc519c6eb72d318ec65820627232b2f796219e87dcf35d0ab4
Score3/10 -
- Target FiveM-LUA-EXECUTOR-main/README.md
- Size 632B
- SHA256 9e3a68995403d014ed45adb65591f70dc2072cd1cd8a680069993afa0936eaaa
Score3/10 -
- Target FiveM-LUA-EXECUTOR-main/TiagoExecutor.exe
- Size 36KB
- SHA256 9df11356c5ac61d2aa7b5425e6322fc016b0ed5790dacb201396500b3eee03f7
Score8/10-
Downloads MZ/PE file
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
- Target FiveM-LUA-EXECUTOR-main/auth.hpp
- Size 1KB
- SHA256 3414a4cb52b4efadfb3c86d451542adbfddd02f6b988c0855052ec287b308222
Score3/10 -
- Target FiveM-LUA-EXECUTOR-main/d3d_Hook.cpp
- Size 3KB
- SHA256 c82208bff966293bf18ada811fa147d174972cc61f5d6bf7cfb24ff6633a5236
Score3/10 -
- Target FiveM-LUA-EXECUTOR-main/d3d_Hook.hpp
- Size 480B
- SHA256 33c8b94e133540c737622cc6ad29065a0f2e7f76ac505374b753e201391671b0
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target FiveM-LUA-EXECUTOR-main/dllmain.cpp
- Size 5KB
- SHA256 0cf70b9bda1c28740f76ca9f46dd81064e5da84410f9b80e34a6b576fba41a2e
Score3/10