Overview

overview

6

Static

static

3

Application.cmd

windows10-2004-x64

6

Application.cmd

windows11-ltsc_2024-x64

6

compiler.exe

windows10-2004-x64

1

compiler.exe

windows11-ltsc_2024-x64

1

lua51.dll

windows10-2004-x64

1

lua51.dll

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    tsb-gs-telegrambot_v3.7.5.zip
  • Size 1.3MB
  • Sample261102-pew26ss1dw
  • SHA256 ea797410319b6cceb3e0da2296a9f2492fdf0b9e537386064e6c517d7249f89e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
discoveryexecution

Malware Config

Targets

    • Target
      Application.cmd
    • Size 42B
    • SHA256 5f9cf12aa21e3adb69252272c382cbc7bf8f47228b99aa6d39324321c04a58f2
    • MD5 SHA1 SHA512
    Score
    6/10
    discoveryexecution

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

      discovery
    behavioral1behavioral2
    • Target
      compiler.exe
    • Size 98KB
    • SHA256 5343326fb0b4f79c32276f08ffcc36bd88cde23aa19962bd1e8d8b80f5d33953
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral3behavioral4
    • Target
      lua51.dll
    • Size 3.4MB
    • SHA256 c7a657af5455812fb215a8888b7e3fd8fa1ba27672a3ed9021eb6004eff271ac
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral5behavioral6

MITRE ATT&CK Enterprise v16

Tasks