Overview

overview

6

Static

static

3

Launch.cmd

windows10-2004-x64

6

Launch.cmd

windows11-ltsc_2024-x64

6

lua51.dll

windows10-2004-x64

1

lua51.dll

windows11-ltsc_2024-x64

1

luajit.exe

windows10-2004-x64

1

luajit.exe

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    dashbord-financiero.zip
  • Size 1.3MB
  • Sample261104-wtrvbseb58
  • SHA256 1be439386791ae87b25533c128eb51536db2df46e9c419c6348b000a983e7f8e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
discoveryexecution

Malware Config

Targets

    • Target
      Launch.cmd
    • Size 112B
    • SHA256 8a1123d96b46ea3333746f2ebd968de3e0a14b24708045cefc9712ec73f18b20
    • MD5 SHA1 SHA512
    Score
    6/10
    discoveryexecution

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

      discovery
    behavioral1behavioral2
    • Target
      lua51.dll
    • Size 3.4MB
    • SHA256 c7a657af5455812fb215a8888b7e3fd8fa1ba27672a3ed9021eb6004eff271ac
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral3behavioral4
    • Target
      luajit.exe
    • Size 98KB
    • SHA256 5343326fb0b4f79c32276f08ffcc36bd88cde23aa19962bd1e8d8b80f5d33953
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral5behavioral6

MITRE ATT&CK Enterprise v16

Tasks