Lure GitHub AI-tool ZIP download followed by LuaJIT launcher chain

ills3c Intel&Coffee@Ills3C

•updated yesterday•3•0•5

Detects a sequence where a ZIP file from known lure repositories or names is downloaded, followed within a day by the execution of a LuaJIT binary (util64.exe or luajit.exe) via a script launcher (Application.bat or Launcher.cmd) using obfuscated text files.