ba78e8dbe587d17e95d4ff95d4ee9d595eb54cc427e3c9053b31c7ceaffd0d9b

General

Target
fort-polio.v2.4.9.zip
Size 1.3MB
Sample261023-pd6j8ast2n
SHA256 ba78e8dbe587d17e95d4ff95d4ee9d595eb54cc427e3c9053b31c7ceaffd0d9b
MD5 e3f861ede6eb1453164227f17dbd9ec2
SHA1 25a31b97581386c198873ba1eddaf98a9ee1449e
SHA512 8b3017815ee77518e6d73d0e744f6d9d15512ed5934164663c07b40fef66a9ae13d20af1b13f40ce4f38aaf1e85460159e4337c705fd135bc8d173c453535d1c
SSDEEP 24576:JCZf7e3Q6OQ/QxTJ7ILzYlsRhjw6LCvavtxU6bJOt3ztV3lGvobudV:JeRxTN+ke3eSvFJujzlGvoSdV
TLSH
T1015533824664D5DEE0FF6981BD7BCCC9652E35FAAADD195A40043370863F0637EE82C6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery execution

Malware Config

Targets

- Target
  Installer.bat
- Size 27B
- SHA256 60721f83efc4922d2a38b2b45628ba8b464d65b15bd44f4d0d319d81c0e73341
- MD5 685fc4398e1dabb82596282558504fdb
- SHA1 d616b717f7b2df1c4caa0c773ac648df6ff00d7a
- SHA512 3a4ea5e721affaef6016c0ce30f48d91912a0e022941b25dfdf214ec407529bcdae448a839e12745754898da3a0a5368f4c65cfa8537ace5d60f20063e0a6532
- MD5 SHA1 SHA512
Score

6^/10

discovery execution
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
  discovery
behavioral1 behavioral2
- Target
  lua51.dll
- Size 3.4MB
- SHA256 c7a657af5455812fb215a8888b7e3fd8fa1ba27672a3ed9021eb6004eff271ac
- MD5 4ebd617a3ad9a9619172bd14a902a400
- SHA1 270f66d2c84ee86ff4b07c6220c51abd4897b5f0
- SHA512 b008a00d7e57ef4786b14f28aee3880318820dd85d66539263a3f68b547e89bce8db32ad422d4eae6795219ec3ddcd72e7780aed9e725ed3c171d11492e47571
- SSDEEP 24576:QXEeYq+Fjb1h2Ac9qJqvqj+OhbaijGPDX732ywPKpQlABQFi8ePj40RvzinxO4xS:EEDv/2Ac9qB+OR4n3xBQKvjGQe11Fgl
- TLSH
  T129F54B49A7D1995AF112C2708E9B4375372BE410333B9FE76F8AE2203CD7AD8DD95602
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  luajit.exe
- Size 98KB
- SHA256 5343326fb0b4f79c32276f08ffcc36bd88cde23aa19962bd1e8d8b80f5d33953
- MD5 00f60ee3ff2dee681b5d7d442009b2c2
- SHA1 f5199b4191add11d02d58f521cbea21465b7ff6b
- SHA512 6e3754ec8596f3aaed92387c5bd56ee9d65fe54af6f44d2bc89b4df0f670e379137bc5eca5ba8aceb030bd4b45970b3c01f2132d1eef53f5070f9af4d4246562
- SSDEEP 1536:mmNzk2shF9CXUatIEqTIm4gKN2PwJy4wMUFA8:mmVvtQTKN64wHK8
- TLSH
  T1A9A3B5CBB6A44DAAF740423C80E6D321613FF6F0A6131B576A3476312F52B916DCB16E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6