General

  • Target
    Lynx.exe
  • Size 53.3MB
  • Sample261107-thkwjad12l
  • SHA256 ae55e412f55f535fe9b2dd128444ad9390a0c8d68dbb1f9693797db0588e3f3e
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Lynx.exe
    • Size 53.3MB
    • SHA256 ae55e412f55f535fe9b2dd128444ad9390a0c8d68dbb1f9693797db0588e3f3e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Executes dropped EXE

    • Modifies file permissions

    • Checks whether UAC is enabled

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Network Share Discovery

      Attempt to gather information on host network.

MITRE ATT&CK Enterprise v16

Tasks