General
- Target LuaTools-win-Setup.exe
- Size 11.4MB
- Sample261107-tx7zlsds5t
- SHA256 af22542a9d62d67c09bf2ba737bb3d2717ef87ca5f23af94324656952f81c49b
- MD5 7ab5fffe52fb851f01fcd66d89bd6088
- SHA1 364b00a22a0f4dee1a442c225b42dde22b2830d6
- SHA512 16dcdaae1126ce8cac734f46fd16dbfe418ed2474969f12b32741b16c72afd91affeaf185baaebde3488cb2e4c2b2924bfa745fa5f26117e4802a0644a2dbfef
- SSDEEP 196608:K4MyYyDTgGP8K66n0040yF5NFWjPnN4Sw6qHn3ILn03t+6E4Uej9QqQz:iJyng9Kjn60ojFWjfN4SwVI70bUeBQq2
- TLSH T1A5C60162FF02D0BBD48A01B5D43EB73DB6369E95872A85D34AA93C5CA8F1360584335F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
LuaTools-win-Setup.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
LuaTools-win-Setup.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target LuaTools-win-Setup.exe
- Size 11.4MB
- SHA256 af22542a9d62d67c09bf2ba737bb3d2717ef87ca5f23af94324656952f81c49b
- MD5 7ab5fffe52fb851f01fcd66d89bd6088
- SHA1 364b00a22a0f4dee1a442c225b42dde22b2830d6
- SHA512 16dcdaae1126ce8cac734f46fd16dbfe418ed2474969f12b32741b16c72afd91affeaf185baaebde3488cb2e4c2b2924bfa745fa5f26117e4802a0644a2dbfef
- SSDEEP 196608:K4MyYyDTgGP8K66n0040yF5NFWjPnN4Sw6qHn3ILn03t+6E4Uej9QqQz:iJyng9Kjn60ojFWjfN4SwVI70bUeBQq2
- TLSH T1A5C60162FF02D0BBD48A01B5D43EB73DB6369E95872A85D34AA93C5CA8F1360584335F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.