Overview

overview

6

Static

static

3

Application.bat

windows10-2004-x64

6

Application.bat

windows11-ltsc_2024-x64

6

lfs.js

windows10-2004-x64

3

lfs.js

windows11-ltsc_2024-x64

3

lua51.dll

windows10-2004-x64

1

lua51.dll

windows11-ltsc_2024-x64

1

util64.exe

windows10-2004-x64

1

util64.exe

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    SDX-Factory-R-Lo-3.9-alpha.1.zip
  • Size 456KB
  • Sample261006-wtrvbsev6m
  • SHA256 fe26f2296c65d4e06387100bec56444098df6f57b79ba7489ae4a8b712ec03f8
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
discoveryexecution

Malware Config

Targets

    • Target
      Application.bat
    • Size 26B
    • SHA256 4f5c5ad522d8dba60e89c443e07d65c3ce373ef1a617d220d3b69a185c11dae2
    • MD5 SHA1 SHA512
    Score
    6/10
    discoveryexecution

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

      discovery
    behavioral1behavioral2
    • Target
      lfs.txt
    • Size 302KB
    • SHA256 2a7afb187157a4052e5b9797d1d1c7ee807b2edeffef076a08b20b12e3dcf317
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral3behavioral4
    • Target
      lua51.dll
    • Size 587KB
    • SHA256 04d3c82782927330d56827ff551697666dbab4b3abf5b86bde492efdd142bc58
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral5behavioral6
    • Target
      util64.exe
    • Size 31KB
    • SHA256 7ad4b911d05a12f91ab27ba3baa351a56653ca099dda7ad87ee2b94f8cd018c9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral7behavioral8

MITRE ATT&CK Enterprise v16

Tasks