Overview

overview

6

Static

static

3

Application.bat

windows10-2004-x64

6

Application.bat

windows11-ltsc_2024-x64

6

lfs.js

windows10-2004-x64

3

lfs.js

windows11-ltsc_2024-x64

3

lua51.dll

windows10-2004-x64

1

lua51.dll

windows11-ltsc_2024-x64

1

util64.exe

windows10-2004-x64

1

util64.exe

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    messenger-codex-v2.6.zip
  • Size 456KB
  • Sample261102-wxthbscs2s
  • SHA256 53039bdeb3e155236dce324281f59846c2da7518a54859c409286aaff86d61a2
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
discoveryexecution

Malware Config

Targets

    • Target
      Application.bat
    • Size 26B
    • SHA256 4f5c5ad522d8dba60e89c443e07d65c3ce373ef1a617d220d3b69a185c11dae2
    • MD5 SHA1 SHA512
    Score
    6/10
    discoveryexecution

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

      discovery
    behavioral1behavioral2
    • Target
      lfs.txt
    • Size 302KB
    • SHA256 2a7afb187157a4052e5b9797d1d1c7ee807b2edeffef076a08b20b12e3dcf317
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral3behavioral4
    • Target
      lua51.dll
    • Size 587KB
    • SHA256 04d3c82782927330d56827ff551697666dbab4b3abf5b86bde492efdd142bc58
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral5behavioral6
    • Target
      util64.exe
    • Size 31KB
    • SHA256 7ad4b911d05a12f91ab27ba3baa351a56653ca099dda7ad87ee2b94f8cd018c9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral7behavioral8

MITRE ATT&CK Enterprise v16

Tasks