Overview

overview

6

Static

static

1

@start_server.bat

windows10-2004-x64

3

@start_server.bat

windows11-ltsc_2024-x64

3

fcm-oneshot.js

windows10-2004-x64

3

fcm-oneshot.js

windows11-ltsc_2024-x64

3

selector.js

windows10-2004-x64

3

selector.js

windows11-ltsc_2024-x64

3

setup.ps1

windows10-2004-x64

6

setup.ps1

windows11-ltsc_2024-x64

6

update-models.ps1

windows10-2004-x64

3

update-models.ps1

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    claude-proxy-auto-updater-windows-v6.1.zip
  • Size 16KB
  • Sample261102-r7edyafd74
  • SHA256 6d0100a238618de24e57c47923981dc3ffb16737ce71fe5fbdaaa8ebbdac7d9a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
execution

Malware Config

Targets

    • Target
      @start_server.bat
    • Size 1KB
    • SHA256 1bb254fbf14c169ee7000438189ffe3da6e6e8ba916859bba075c76408e3ac48
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral1behavioral2
    • Target
      fcm-oneshot.mjs
    • Size 16KB
    • SHA256 b01f58acba4d2b10e12f525c63b1dc8bfbcd11888832c8dcefee39bea7b36174
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral3behavioral4
    • Target
      selector.mjs
    • Size 7KB
    • SHA256 a6a21fa88566916536b6f76936fd9d20dd707bf49643e23a387abf64ab4660c2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral5behavioral6
    • Target
      setup.ps1
    • Size 4KB
    • SHA256 1a50e9cc5d351a8297945068f0f5552a6512a1398ff90e32c26782f1e4ed2386
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    execution

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

      execution
    behavioral7behavioral8
    • Target
      update-models.ps1
    • Size 13KB
    • SHA256 d2db06c2d836306392616e8c3f372aa8038301d9785ada39aea9d79a6322893f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral10behavioral9

MITRE ATT&CK Enterprise v16

Tasks