Overview

overview

5

Static

static

Controller.jar

windows7-x64

1

Controller.jar

windows10-2004-x64

1

files/Builder.exe

windows7-x64

1

files/Builder.exe

windows10-2004-x64

1

files/Installer.jar

windows7-x64

1

files/Installer.jar

windows10-2004-x64

1

files/Stub.jar

windows7-x64

1

files/Stub.jar

windows10-2004-x64

1

files/Updater.jar

windows7-x64

1

files/Updater.jar

windows10-2004-x64

1

files/lib/...ub.jar

windows7-x64

1

files/lib/...ub.jar

windows10-2004-x64

1

files/lib/API.jar

windows7-x64

1

files/lib/API.jar

windows10-2004-x64

1

files/lib/...ib.jar

windows7-x64

1

files/lib/...ib.jar

windows10-2004-x64

1

files/lib/zkmlib.jar

windows7-x64

1

files/lib/zkmlib.jar

windows10-2004-x64

1

files/plug...ub.jar

windows7-x64

1

files/plug...ub.jar

windows10-2004-x64

1

launch_unix.sh

ubuntu-18.04-amd64

5

launch_unix.sh

debian-9-armhf

5

launch_unix.sh

debian-9-mips

5

launch_unix.sh

debian-9-mipsel

5

launch_win.bat

windows7-x64

1

launch_win.bat

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d3236d284070c6c5303fa159fc4507e2e45a94cd47e25986c3d57ff8d0e58404

  • Size

    4.3MB

  • Sample

    221128-b2xqbseb93

  • MD5

    38a1ecc37150a4df828bddfec67307fc

  • SHA1

    a34e462ffba1485fc061b4998fbf35a9cc05d38e

  • SHA256

    d3236d284070c6c5303fa159fc4507e2e45a94cd47e25986c3d57ff8d0e58404

  • SHA512

    240696926da5cb475e50f1ab07d3cc746e35f9f8997f0b270ffecc07e72ebafb49e42c32a1f3f0f714cc876dd79ab0f8571f933549a3b7b1eedbb394358054db

  • SSDEEP

    98304:trv10PwWytoH5nq3sJZuvAjpD/dT1jbZ2ywUTwvwl7hC:Jd07Mh3aZuvEDFZAUMvwldC

Score
5/10
linux

Malware Config

Targets

    • Target

      Controller.jar

    • Size

      1.7MB

    • MD5

      a418d5e05c3b24c3c1d30bdf781fdb42

    • SHA1

      feaa7f4224bae7d4bc2297879758d1c7bba69c77

    • SHA256

      9467dabd6d30e26c492fe98104c8eb4d6234e3943932c730218c2f940d012713

    • SHA512

      bcc2f209505da3f6ff944a39d7298d84d80aced2b122b8d2db0619d3df2d0692c803edc2538d6abc29601cc57cf4d0f75126628affbe40cffcd4eaa39360816f

    • SSDEEP

      49152:fG73RaWXNDVnx3f+6OyO/iDSbAU28ElZKdrE6hoE50+Ck:fCagND1xG6OX8U28EjWw6eE5T

    Score
    1/10
    behavioral1behavioral2

    • Target

      files/Builder.exe

    • Size

      33KB

    • MD5

      4c9bcaf176b3bd8a7911f19fa8077490

    • SHA1

      c40c030a5317a7cb745aff16e78b11b803114e83

    • SHA256

      dd811322b3c78642e3ca888d95f9c6f7d7b56247979358731bcac341f29c6822

    • SHA512

      1be7f706d7dfe13c70085f602fd7e128020c504aae6e2b292bac4cfa05ccf61a0e394ac4c0b0a35eecdbdf8747ae41d99f00f1e45dab09b9a16232651f4ee292

    • SSDEEP

      384:KZulSaJbggAOiJjk8mZeN892TjgVmREolZJvivdjvQNW1fAF4TDHfoocwVM5zAN:TRgsiNm0igTbREoduvQNW1bTD2lCN

    Score
    1/10
    behavioral3behavioral4

    • Target

      files/Installer.jar

    • Size

      11KB

    • MD5

      5a3a21dfdefe86f428cbfd00d7b1c3e0

    • SHA1

      f68ce24e70391a052e3c69b5d55b6d227e22f518

    • SHA256

      bebe013e8e83cba58fe53ef02f711f456af7fba47a9e9bb45f914871a553d77a

    • SHA512

      d730786ba4a3e9ceaad5ec22759a77f631af226fab88adf934f3991eaf03adcff1e26223b9fd099e9ff851c215cd0e25188352859b07e5eeb7293e2c50f77abd

    • SSDEEP

      192:ZCMjDg04Jz+bO9gZ/U8skfRMSBc8D10ELy0AmdfV0nH:3804J19gy8sEBBDDGp0AAfV0H

    Score
    1/10
    behavioral5behavioral6

    • Target

      files/Stub.jar

    • Size

      235KB

    • MD5

      563e1b9317218605a95ce42ea1b79714

    • SHA1

      c3d05e0450c74c3d147c9bbf4e0289e9ee9eafbf

    • SHA256

      2feef23257844b54250c8df97544cdc2521026a4ebd445db9de5a95acefaafe3

    • SHA512

      9b7567170a2b0c2618e3747afc4c0acecf347a32a705e1f306b406b4fdac7692cdf39a9b5aa82f4489576c32552ef45a0d56fef782d072b9bf881c15ff224f6b

    • SSDEEP

      6144:NHLDw4jierblKHAh2InPjY9GokxnAXY9bvhbTZN:pnw4jiwcOFs9Gok6Xmhb1N

    Score
    1/10
    behavioral7behavioral8

    • Target

      files/Updater.jar

    • Size

      6KB

    • MD5

      ad7bffd69604122bedaf5a6045ee1f99

    • SHA1

      c0fd5dea64ff8a25021e214712dc450974979131

    • SHA256

      d10efa26e35d9c0e7536899aac6b6b18c78bac8dde512dc3fdbe3232d28f272d

    • SHA512

      f7b16f276ebbeaa5a184db69d8e9af974f9092622ec0ad18f420590420d3d66de3e192519c48c76fbec5beb72059d38d91e39651fd8de5440d3993ba8643348b

    • SSDEEP

      192:0YkQYdtGb5lPJX6rBRSNb9MkdMITvpVoTI9bhD:0ut5lBKB65PMIughD

    Score
    1/10
    behavioral10behavioral9

    • Target

      files/lib/API Stub.jar

    • Size

      723B

    • MD5

      3120f065e3e007f6bedaecbee8018a44

    • SHA1

      1d0a4e97698438e6332b6e2aaabc0e67b584b25f

    • SHA256

      a9314bf4ffdf6a304b667f39dae5fb5635f48bcb5c9bb9350681504b988af066

    • SHA512

      8fd2a40e79c4740c6306cc9f6f478035c1feb18f484c28d4b8f23ee13bccce8986207af75925e25ac0de3e6b53cf4af6c928b0e92cd4af0fd32ecde82104bccc

    Score
    1/10
    behavioral11behavioral12

    • Target

      files/lib/API.jar

    • Size

      18KB

    • MD5

      edccb7db9ec6a97d0eabfc74082ae675

    • SHA1

      e3cacb0d029d44189cd6a3116bde039b60b02af4

    • SHA256

      af77cbc4ede056c5fd7f7e35c6af2afd218fb2c0fd4c0292ce8601a4e6e00c81

    • SHA512

      bf32513df4d6985e8c85c27c2acc273e0e0e1fbff10aa6376b1a2128a6ef34e17eed4b582e3f5495229859bcd591ea639ea7253a307d76b9b1381915b85d5e57

    • SSDEEP

      384:y00hQqqLW6bJZQmew4oevrzxxGAQNsg1XviYfFuRN6FaeS1QLJsI/LLC9pFMPijf:QUSvGV4f3P9Yqjf

    Score
    1/10
    behavioral13behavioral14

    • Target

      files/lib/graphslib.jar

    • Size

      210KB

    • MD5

      93c9706e86ad7ebb8f5c74858dcfff6c

    • SHA1

      d1d4f50cfa8577f7e13165537416d706ec49b61a

    • SHA256

      58d915a8a15cd63d618b5388a6aa036392023b0ceaf82359daa7f77c11885e06

    • SHA512

      7bb0c474c050f26493c6c3a76ca4ce79587ad184c5d8f319dbbce8d7c3fd300724635465ea4d92145b53db4c2421874c5963a3155f8832a3488c0d86c8283774

    • SSDEEP

      3072:bOFVdQjLEsSn8+M3fMpppEqaB22F3T6ZZJNXwEsXCmSSa/hUjqxmTek0fzzTT8g9:bOHCj4j8VQ2tE7hw4mPa/hUg/nDZ7

    Score
    1/10
    behavioral15behavioral16

    • Target

      files/lib/zkmlib.jar

    • Size

      15KB

    • MD5

      7020302c39da29a20f3d06462fd6ba8d

    • SHA1

      cf1bcd19f3c0ae72822bb83feadf6b8cc7ffb4c5

    • SHA256

      8164548a83e1a10da24e97f81c717ffb9ef05686724347bd26ae914a2f60667b

    • SHA512

      3101eab1b0b7854d000900d6101cf05e9042db9e837e1e2198095c14a95dd06fbc94d9638b3e6f025edb6c5d06465f6ac477c26455f0a998f18ecc2d2d35fc47

    • SSDEEP

      384:o/WYwMJQchX3vSLb4WpdZ4ZVk7EFXw6I99h8I:iZxhPk4KdZ4ZsEFXw6LI

    Score
    1/10
    behavioral17behavioral18

    • Target

      files/plugins/stubs/Webcam Stub.jar

    • Size

      1.1MB

    • MD5

      82fceb6674362208ad19927d6825bfa6

    • SHA1

      76bcfcce97769b4bf0742a89be584eaca675720e

    • SHA256

      f57c4038917a676743630484fe38258a80ac1848da0f55bd9a6c9e9a11f659b7

    • SHA512

      9a40b02deca224a48500db125ee37d0e48cbcd671de1cd4640c5cca714666aea960d06ea87f2defa5b77e5e853fa26114cd4103b5910a419c9455c8355a33695

    • SSDEEP

      24576:ckNmKUftWhAaGAPYG0+mIFo5xnWxCUy5LkFeYSGiezsdCfY7v:chKNhAaGAwG0+m/5xJUy5OieIC8

    Score
    1/10
    behavioral19behavioral20

    • Target

      launch_unix.sh

    • Size

      36B

    • MD5

      88ab2579073efcf1f8f4a8265727983a

    • SHA1

      b4af62752f1c682fe3dda5caa3d36383940967fa

    • SHA256

      fb4c2e1fb9668161082a558cb34443969db6f482b2cc4531a7afec7ace49f657

    • SHA512

      47af2728505e06a79d9d92ff3b76b15d0fa8d634ee4ff802c38687bd0ed8a43158045852f6c2ed8c861ff12cfce0b11e4ce3d361a97dc1b5f0f569c7017ace6e

    Score
    5/10

    • Writes file to tmp directory

      Malware often drops required files in the /tmp directory.

    behavioral21behavioral22behavioral23behavioral24

    • Target

      launch_win.bat

    • Size

      31B

    • MD5

      f3617ae33a721b4dd513760962b81171

    • SHA1

      0dad52733654ca6ad25b25f1ab9c372ef8394caf

    • SHA256

      d939991f8ff667a7d1a05bf73b9a54c96a40ade139c1fc7698a4230dacaf6b13

    • SHA512

      b9879ecdac2d78aa1eacae88939ba7ba6fb6fb8c46befbe102b4488fbf4abe3f4130cc03b290333f8ad4237b3fe2a933d3007e01f39e64ce130ca9934d39b961

    Score
    1/10
    behavioral25behavioral26

MITRE ATT&CK Matrix

Tasks