General
- Target LuaTools-win-Setup.exe
- Size 11.4MB
- Sample261107-sxms1acz2x
- SHA256 af22542a9d62d67c09bf2ba737bb3d2717ef87ca5f23af94324656952f81c49b
- MD5 7ab5fffe52fb851f01fcd66d89bd6088
- SHA1 364b00a22a0f4dee1a442c225b42dde22b2830d6
- SHA512 16dcdaae1126ce8cac734f46fd16dbfe418ed2474969f12b32741b16c72afd91affeaf185baaebde3488cb2e4c2b2924bfa745fa5f26117e4802a0644a2dbfef
- SSDEEP 196608:K4MyYyDTgGP8K66n0040yF5NFWjPnN4Sw6qHn3ILn03t+6E4Uej9QqQz:iJyng9Kjn60ojFWjfN4SwVI70bUeBQq2
- TLSH T1A5C60162FF02D0BBD48A01B5D43EB73DB6369E95872A85D34AA93C5CA8F1360584335F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
LuaTools-win-Setup.exe
Resource
win11-20260911-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target LuaTools-win-Setup.exe
- Size 11.4MB
- SHA256 af22542a9d62d67c09bf2ba737bb3d2717ef87ca5f23af94324656952f81c49b
- MD5 7ab5fffe52fb851f01fcd66d89bd6088
- SHA1 364b00a22a0f4dee1a442c225b42dde22b2830d6
- SHA512 16dcdaae1126ce8cac734f46fd16dbfe418ed2474969f12b32741b16c72afd91affeaf185baaebde3488cb2e4c2b2924bfa745fa5f26117e4802a0644a2dbfef
- SSDEEP 196608:K4MyYyDTgGP8K66n0040yF5NFWjPnN4Sw6qHn3ILn03t+6E4Uej9QqQz:iJyng9Kjn60ojFWjfN4SwVI70bUeBQq2
- TLSH T1A5C60162FF02D0BBD48A01B5D43EB73DB6369E95872A85D34AA93C5CA8F1360584335F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.