Overview
overview
5Static
static
Controller.jar
windows7-x64
1Controller.jar
windows10-2004-x64
1files/Builder.exe
windows7-x64
1files/Builder.exe
windows10-2004-x64
1files/Installer.jar
windows7-x64
1files/Installer.jar
windows10-2004-x64
1files/Stub.jar
windows7-x64
1files/Stub.jar
windows10-2004-x64
1files/Updater.jar
windows7-x64
1files/Updater.jar
windows10-2004-x64
1files/lib/...ub.jar
windows7-x64
1files/lib/...ub.jar
windows10-2004-x64
1files/lib/API.jar
windows7-x64
1files/lib/API.jar
windows10-2004-x64
1files/lib/...ib.jar
windows7-x64
1files/lib/...ib.jar
windows10-2004-x64
1files/lib/zkmlib.jar
windows7-x64
1files/lib/zkmlib.jar
windows10-2004-x64
1files/plug...ub.jar
windows7-x64
1files/plug...ub.jar
windows10-2004-x64
1launch_unix.sh
ubuntu-18.04-amd64
5launch_unix.sh
debian-9-armhf
5launch_unix.sh
debian-9-mips
5launch_unix.sh
debian-9-mipsel
5launch_win.bat
windows7-x64
1launch_win.bat
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Controller.jar
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
Controller.jar
Resource
win10v2004-20220901-en
Behavioral task
behavioral3
Sample
files/Builder.exe
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
files/Builder.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
files/Installer.jar
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
files/Installer.jar
Resource
win10v2004-20220901-en
Behavioral task
behavioral7
Sample
files/Stub.jar
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
files/Stub.jar
Resource
win10v2004-20221111-en
Behavioral task
behavioral9
Sample
files/Updater.jar
Resource
win7-20221111-en
Behavioral task
behavioral10
Sample
files/Updater.jar
Resource
win10v2004-20221111-en
Behavioral task
behavioral11
Sample
files/lib/API Stub.jar
Resource
win7-20221111-en
Behavioral task
behavioral12
Sample
files/lib/API Stub.jar
Resource
win10v2004-20221111-en
Behavioral task
behavioral13
Sample
files/lib/API.jar
Resource
win7-20220812-en
Behavioral task
behavioral14
Sample
files/lib/API.jar
Resource
win10v2004-20220812-en
Behavioral task
behavioral15
Sample
files/lib/graphslib.jar
Resource
win7-20220812-en
Behavioral task
behavioral16
Sample
files/lib/graphslib.jar
Resource
win10v2004-20220901-en
Behavioral task
behavioral17
Sample
files/lib/zkmlib.jar
Resource
win7-20220812-en
Behavioral task
behavioral18
Sample
files/lib/zkmlib.jar
Resource
win10v2004-20221111-en
Behavioral task
behavioral19
Sample
files/plugins/stubs/Webcam Stub.jar
Resource
win7-20220812-en
Behavioral task
behavioral20
Sample
files/plugins/stubs/Webcam Stub.jar
Resource
win10v2004-20221111-en
Behavioral task
behavioral21
Sample
launch_unix.sh
Resource
ubuntu1804-amd64-20221111-en
Behavioral task
behavioral22
Sample
launch_unix.sh
Resource
debian9-armhf-en-20211208
Behavioral task
behavioral23
Sample
launch_unix.sh
Resource
debian9-mipsbe-20221111-en
Behavioral task
behavioral24
Sample
launch_unix.sh
Resource
debian9-mipsel-20221111-en
Behavioral task
behavioral25
Sample
launch_win.bat
Resource
win7-20220812-en
Behavioral task
behavioral26
Sample
launch_win.bat
Resource
win10v2004-20220812-en
General
-
Target
d3236d284070c6c5303fa159fc4507e2e45a94cd47e25986c3d57ff8d0e58404
-
Size
4.3MB
-
MD5
38a1ecc37150a4df828bddfec67307fc
-
SHA1
a34e462ffba1485fc061b4998fbf35a9cc05d38e
-
SHA256
d3236d284070c6c5303fa159fc4507e2e45a94cd47e25986c3d57ff8d0e58404
-
SHA512
240696926da5cb475e50f1ab07d3cc746e35f9f8997f0b270ffecc07e72ebafb49e42c32a1f3f0f714cc876dd79ab0f8571f933549a3b7b1eedbb394358054db
-
SSDEEP
98304:trv10PwWytoH5nq3sJZuvAjpD/dT1jbZ2ywUTwvwl7hC:Jd07Mh3aZuvEDFZAUMvwldC
Malware Config
Signatures
Files
-
d3236d284070c6c5303fa159fc4507e2e45a94cd47e25986c3d57ff8d0e58404.zip
-
Controller.jar.jar
-
args.txt
-
files/Builder.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
files/Installer.jar.jar
-
files/Stub.jar.jar
-
files/Updater.jar.jar
-
files/args.txt
-
files/db.dat
-
files/domains.txt
-
files/help/Building/Allowed OS.txt
-
files/help/Building/Binder.txt
-
files/help/Building/Debug Messages.txt
-
files/help/Building/Delay.txt
-
files/help/Building/Error Handling.txt
-
files/help/Building/Final.txt
-
files/help/Building/General.txt
-
files/help/Building/Host File.txt
-
files/help/Building/Install Message.txt
-
files/help/Building/Mutex.txt
-
files/help/Building/Network.txt
-
files/help/Building/Output.txt
-
files/help/Building/Persistance.txt
-
files/help/Building/Plugins.txt
-
files/help/Building/Startup.txt
-
files/help/Building/Timeout.txt
-
files/help/Building/Tray Icon.txt
-
files/help/Building/USB.txt
-
files/help/Control Panel/File System/File Manager.txt
-
files/help/Control Panel/File System/File Searcher.txt
-
files/help/Control Panel/Fun/Drain CPU.txt
-
files/help/Control Panel/Fun/Fun Manager.txt
-
files/help/Control Panel/Fun/Messagebox.txt
-
files/help/Control Panel/Fun/Piano.txt
-
files/help/Control Panel/Fun/Remote Chat.txt
-
files/help/Control Panel/Network Functions/Download Manager.txt
-
files/help/Control Panel/Remote MSConfig/Registry Startup.txt
-
files/help/Control Panel/Remote MSConfig/Windows Services.txt
-
files/help/Control Panel/Scripting/Batch.txt
-
files/help/Control Panel/Scripting/HTML.txt
-
files/help/Control Panel/Scripting/JavaScript.txt
-
files/help/Control Panel/Scripting/VB Script.txt
-
files/help/Control Panel/Spy Functions/Keylogger.txt
-
files/help/Control Panel/Spy Functions/Offline Keylogger.txt
-
files/help/Control Panel/Spy Functions/Remote Screen.txt
-
files/help/Control Panel/Spy Functions/Sound Capture.txt
-
files/help/Control Panel/Stealers and Data/Clipboard.txt
-
files/help/Control Panel/Stealers and Data/FileZilla.txt
-
files/help/Control Panel/Stealers and Data/Minecraft.txt
-
files/help/Control Panel/Stealers and Data/uTorrent downloads.txt
-
files/help/Control Panel/System Functions/Hosts File.txt
-
files/help/Control Panel/System Functions/Installed Programs.txt
-
files/help/Control Panel/System Functions/Registry.txt
-
files/help/Control Panel/System Functions/Remote CMD.txt
-
files/help/Control Panel/System Functions/Remote Process.txt
-
files/help/Control Panel/System Info/Computer Info.txt
-
files/help/Control Panel/System Info/Drives.txt
-
files/help/Control Panel/System Info/Environment Variables.txt
-
files/help/Control Panel/System Info/JVM Info.txt
-
files/help/Control Panel/System Info/Monitors.txt
-
files/help/Control Panel/System Info/System Monitor.txt
-
files/help/Control Panel/System Info/System Properties.txt
-
files/help/Customizing Appearance/Changing Icons.txt
-
files/help/Customizing Appearance/Colors.txt
-
files/help/Customizing Appearance/Ping Icons.txt
-
files/help/Sockets/Listening.txt
-
files/lib/API Stub.jar.jar
-
files/lib/API.jar.jar
-
files/lib/graphslib.jar.jar
-
files/lib/zkmlib.jar.jar
-
files/plugins/stubs/Keylogger No Titles.jar.zip
-
files/plugins/stubs/Keylogger Window Titles.jar.zip
-
files/plugins/stubs/Webcam Stub.jar.jar
-
launch_unix.sh.sh linux
-
launch_win.bat