General
-
Target
OBL2021030916KN.jar
-
Size
101KB
-
Sample
210420-6yxs5k987a
-
MD5
64e97e7d8904dab63f5a1f3258a5ed5f
-
SHA1
fbf2bb62728f3431758b38ebfd5ea0bd558e12f0
-
SHA256
013173cc41b763f6afe9256868577a7971921805768706709cea3895967ba947
-
SHA512
d268722d0253c14e1361ebc36e3b9aadc17273e9178bb9af786296c78fc0efa930562b9673f610e827c2d1449c853b39f28da15bb881399e8f41b466cc65b9df
Static task
static1
Behavioral task
behavioral1
Sample
OBL2021030916KN.jar
Resource
win7v20210410
Behavioral task
behavioral2
Sample
OBL2021030916KN.jar
Resource
win10v20210408
Malware Config
Targets
-
-
Target
OBL2021030916KN.jar
-
Size
101KB
-
MD5
64e97e7d8904dab63f5a1f3258a5ed5f
-
SHA1
fbf2bb62728f3431758b38ebfd5ea0bd558e12f0
-
SHA256
013173cc41b763f6afe9256868577a7971921805768706709cea3895967ba947
-
SHA512
d268722d0253c14e1361ebc36e3b9aadc17273e9178bb9af786296c78fc0efa930562b9673f610e827c2d1449c853b39f28da15bb881399e8f41b466cc65b9df
Score10/10-
Drops startup file
-
Loads dropped DLL
-
Adds Run key to start application
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-