Overview

overview

6

Static

static

3

Application.cmd

windows10-2004-x64

6

Application.cmd

windows11-ltsc_2024-x64

6

binl.exe

windows10-2004-x64

1

binl.exe

windows11-ltsc_2024-x64

1

lua51.dll

windows10-2004-x64

1

lua51.dll

windows11-ltsc_2024-x64

1

util.js

windows10-2004-x64

3

util.js

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    ai-platform-flowise-dify-setup-v1.2.zip
  • Size 464KB
  • Sample261017-pgaxqaey7l
  • SHA256 f75b3b5cdf65a9ceaf9afd47c62086ed6e1cd3edab2389811ff76086cfee9496
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
discoveryexecution

Malware Config

Targets

    • Target
      Application.cmd
    • Size 25B
    • SHA256 832e02964a1b4b52035cbbb7952be0da086a49dd0f1b90e4be6e2f4b23a30952
    • MD5 SHA1 SHA512
    Score
    6/10
    discoveryexecution

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

      discovery
    behavioral1behavioral2
    • Target
      binl.exe
    • Size 31KB
    • SHA256 7ad4b911d05a12f91ab27ba3baa351a56653ca099dda7ad87ee2b94f8cd018c9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral3behavioral4
    • Target
      lua51.dll
    • Size 587KB
    • SHA256 04d3c82782927330d56827ff551697666dbab4b3abf5b86bde492efdd142bc58
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral5behavioral6
    • Target
      util.txt
    • Size 317KB
    • SHA256 181c3abd484fd38de54799d0e03f0457bef487105d031d3ee443a04be65cf5aa
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral7behavioral8

MITRE ATT&CK Enterprise v16

Tasks