Overview

overview

6

Static

static

3

1Launcher.cmd

windows10-2004-x64

6

1Launcher.cmd

windows11-ltsc_2024-x64

6

protocol.js

windows10-2004-x64

3

protocol.js

windows11-ltsc_2024-x64

3

vendor.exe

windows10-2004-x64

1

vendor.exe

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    bot-Circle-undwindling.zip
  • Size 532KB
  • Sample261006-wtrvbsev6j
  • SHA256 96d06efb22935e2739de8412401559f2328fbee4f6fc4bea8e46b6555ac31d47
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
discoveryexecution

Malware Config

Targets

    • Target
      1Launcher.cmd
    • Size 29B
    • SHA256 33a0f2ae33f8c9e8b9f2d32d72f81a135d12be54a81aee62e1a9ad8f6691cd4c
    • MD5 SHA1 SHA512
    Score
    6/10
    discoveryexecution

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

      discovery
    behavioral1behavioral2
    • Target
      protocol.txt
    • Size 301KB
    • SHA256 67ded6b153fa981e9dfed0ab898c264fea99c020bae70a476ea291b838b35b8c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral3behavioral4
    • Target
      vendor.exe
    • Size 753KB
    • SHA256 92f40a56516aec6b47af8fe9dab6dc90dbd5c8b4611d66e9f8c888eb8a6dfc47
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral5behavioral6

MITRE ATT&CK Enterprise v16

Tasks