Overview

overview

6

Static

static

3

Launcher.cmd

windows10-2004-x64

6

Launcher.cmd

windows11-ltsc_2024-x64

6

cdef.js

windows10-2004-x64

3

cdef.js

windows11-ltsc_2024-x64

3

lua51.dll

windows10-2004-x64

1

lua51.dll

windows11-ltsc_2024-x64

1

luajit.exe

windows10-2004-x64

1

luajit.exe

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    mbupload-yrkoinej.bin.zip
  • Size 1.3MB
  • Sample261021-rdknvsfd94
  • SHA256 f5778e4f84c9259519e4e79fca7d7738b6fe8e04246b47e84036e120f0ba27f5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
discoveryexecution

Malware Config

Targets

    • Target
      Launcher.cmd
    • Size 169B
    • SHA256 39d39e6726408e778c8ad3d85010e1db0a686ebec1f8807f96cf80be59dfdd59
    • MD5 SHA1 SHA512
    Score
    6/10
    discoveryexecution

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

      discovery
    behavioral1behavioral2
    • Target
      cdef.txt
    • Size 348KB
    • SHA256 b5c571363632a6887c6e9471435ab0fdcbf16bae6dbdf28d0fc755a9d467e859
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral3behavioral4
    • Target
      lua51.dll
    • Size 3.4MB
    • SHA256 c7a657af5455812fb215a8888b7e3fd8fa1ba27672a3ed9021eb6004eff271ac
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral5behavioral6
    • Target
      luajit.exe
    • Size 98KB
    • SHA256 5343326fb0b4f79c32276f08ffcc36bd88cde23aa19962bd1e8d8b80f5d33953
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral7behavioral8

MITRE ATT&CK Enterprise v16

Tasks