General
- Target PicSpider.Unneared.Release.zip
- Size 1.3MB
- Sample261029-wvbvhass8j
- SHA256 8a0916faa722336cac6db04fa65fdd9ba024ef265674c7c2ab1c3d609c27bd5c
- MD5 2a907b625d6beee9d2de44536728bcdb
- SHA1 3b240d4bbdb53829ff0e7967582bbea03623b0ac
- SHA512 223215e3530f8a3c93c2d993546009d64be5a85774b739bea87d52602909675db7baddfa39e4499fb9ae039cef6fdccf44e91c3986498056271d1245e772ce39
- SSDEEP 24576:EbSS5fzPWTpPq48AK363JeVr7le6JmVrEmWrGpSMYWt0WYCEa2AEKwWv3N0f0wQo:EbNze9PqJekV7lfJmVrTWZ2VYCElnWmd
- TLSH T17C5533382AAFD1A58A45BE75080693B4381F054B759CFEEB7116B10431A85FBD0CE8FB
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Launcher.cmd
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Launcher.cmd
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
lua.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
lua.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
lua51.dll
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
lua51.dll
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target Launcher.cmd
- Size 21B
- SHA256 0b2dd257c50ed37c239e248987132ebc75138d09d01b3be5d360953c190ee5d6
- MD5 e66816f9880811713867e9af8176d26a
- SHA1 1fa0ddfb94d289c963363251e59b64a5847f53f3
- SHA512 9db687536cf81a5da5a977b1e805ffa190db0c67e398d23aa41ad090b2e476dfabe5b1fd6d260a1d15e061c0ea3ee36422154674c097534f9d55739e23723cff
- MD5 SHA1 SHA512
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target lua.exe
- Size 98KB
- SHA256 5343326fb0b4f79c32276f08ffcc36bd88cde23aa19962bd1e8d8b80f5d33953
- MD5 00f60ee3ff2dee681b5d7d442009b2c2
- SHA1 f5199b4191add11d02d58f521cbea21465b7ff6b
- SHA512 6e3754ec8596f3aaed92387c5bd56ee9d65fe54af6f44d2bc89b4df0f670e379137bc5eca5ba8aceb030bd4b45970b3c01f2132d1eef53f5070f9af4d4246562
- SSDEEP 1536:mmNzk2shF9CXUatIEqTIm4gKN2PwJy4wMUFA8:mmVvtQTKN64wHK8
- TLSH T1A9A3B5CBB6A44DAAF740423C80E6D321613FF6F0A6131B576A3476312F52B916DCB16E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target lua51.dll
- Size 3.4MB
- SHA256 c7a657af5455812fb215a8888b7e3fd8fa1ba27672a3ed9021eb6004eff271ac
- MD5 4ebd617a3ad9a9619172bd14a902a400
- SHA1 270f66d2c84ee86ff4b07c6220c51abd4897b5f0
- SHA512 b008a00d7e57ef4786b14f28aee3880318820dd85d66539263a3f68b547e89bce8db32ad422d4eae6795219ec3ddcd72e7780aed9e725ed3c171d11492e47571
- SSDEEP 24576:QXEeYq+Fjb1h2Ac9qJqvqj+OhbaijGPDX732ywPKpQlABQFi8ePj40RvzinxO4xS:EEDv/2Ac9qB+OR4n3xBQKvjGQe11Fgl
- TLSH T129F54B49A7D1995AF112C2708E9B4375372BE410333B9FE76F8AE2203CD7AD8DD95602
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10