Overview

overview

6

Static

static

3

Application.cmd

windows10-2004-x64

6

Application.cmd

windows11-ltsc_2024-x64

6

compiler.exe

windows10-2004-x64

1

compiler.exe

windows11-ltsc_2024-x64

1

cp.js

windows10-2004-x64

3

cp.js

windows11-ltsc_2024-x64

3

lua51.dll

windows10-2004-x64

1

lua51.dll

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    mbupload-nm8_xmxy.bin.zip
  • Size 455KB
  • Sample261021-rdkc4afd89
  • SHA256 141702cb5a5d082042abbfe41fb4697cc5b954125eef8eaec635c2a0c85b4292
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
discoveryexecution

Malware Config

Targets

    • Target
      Application.cmd
    • Size 31B
    • SHA256 9d073f901d24e3284c5fe5d886baa4c8cea8d062d6a61b561208add0b295c2c3
    • MD5 SHA1 SHA512
    Score
    6/10
    discoveryexecution

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

      discovery
    behavioral1behavioral2
    • Target
      compiler.exe
    • Size 31KB
    • SHA256 7ad4b911d05a12f91ab27ba3baa351a56653ca099dda7ad87ee2b94f8cd018c9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral3behavioral4
    • Target
      cp.txt
    • Size 301KB
    • SHA256 d4522d1733716f3a69542115cab173ebbfd14ca7b3c11f53eed7c47818db5d91
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral5behavioral6
    • Target
      lua51.dll
    • Size 587KB
    • SHA256 04d3c82782927330d56827ff551697666dbab4b3abf5b86bde492efdd142bc58
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral7behavioral8

MITRE ATT&CK Enterprise v16

Tasks