Overview

overview

3

Static

static

1

LiteBans.jar

windows7-x64

1

LiteBans.jar

windows10-2004-x64

1

bungee.yml

windows7-x64

3

bungee.yml

windows10-2004-x64

3

config.yml

windows7-x64

3

config.yml

windows10-2004-x64

3

litebans/A.class

windows7-x64

3

litebans/A.class

windows10-2004-x64

3

litebans/B.class

windows7-x64

3

litebans/B.class

windows10-2004-x64

3

litebans/B....class

windows7-x64

3

litebans/B....class

windows10-2004-x64

3

litebans/B....class

windows7-x64

3

litebans/B....class

windows10-2004-x64

3

litebans/C.class

windows7-x64

3

litebans/C.class

windows10-2004-x64

3

litebans/D.class

windows7-x64

3

litebans/D.class

windows10-2004-x64

3

litebans/E.class

windows7-x64

3

litebans/E.class

windows10-2004-x64

3

litebans/F.class

windows7-x64

3

litebans/F.class

windows10-2004-x64

3

litebans/G.class

windows7-x64

3

litebans/G.class

windows10-2004-x64

3

litebans/H.class

windows7-x64

3

litebans/H.class

windows10-2004-x64

3

litebans/I.class

windows7-x64

3

litebans/I.class

windows10-2004-x64

3

litebans/J.class

windows7-x64

3

litebans/J.class

windows10-2004-x64

3

litebans/K.class

windows7-x64

3

litebans/K.class

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    LiteBans.jar

  • Size

    1.4MB

  • Sample

    230922-vfjq5ahc8y

  • MD5

    6b032e2b120b705cf139ec20bad57761

  • SHA1

    48b4277d4920b0e969ff37a657a9d56e0de64755

  • SHA256

    005072918d10c86f7d11dd67f1bd3e51a1dac78de08a666baf2235c46a62d38d

  • SHA512

    4c0462adbd08532ff72dce7295a5eee83ead5ec40ad4fe1c93f265f57a67cf776af568f3465e864f051ba95a174ca8626dbc7f254c965a5f48b1a5fe3e7b69b8

  • SSDEEP

    24576:PIO86EImi90lZjLvv8FW1kks43T7giHDiORjpAjxHxAfOhvdQxldXFhl:QTAYtoFWCks4j7gu5jpW6Gtixl5l

Score
3/10

Malware Config

Targets

    • Target

      LiteBans.jar

    • Size

      1.4MB

    • MD5

      6b032e2b120b705cf139ec20bad57761

    • SHA1

      48b4277d4920b0e969ff37a657a9d56e0de64755

    • SHA256

      005072918d10c86f7d11dd67f1bd3e51a1dac78de08a666baf2235c46a62d38d

    • SHA512

      4c0462adbd08532ff72dce7295a5eee83ead5ec40ad4fe1c93f265f57a67cf776af568f3465e864f051ba95a174ca8626dbc7f254c965a5f48b1a5fe3e7b69b8

    • SSDEEP

      24576:PIO86EImi90lZjLvv8FW1kks43T7giHDiORjpAjxHxAfOhvdQxldXFhl:QTAYtoFWCks4j7gu5jpW6Gtixl5l

    Score
    1/10
    behavioral1behavioral2

    • Target

      bungee.yml

    • Size

      166B

    • MD5

      99af73b2c33ed14bb72f4a29eb43d6da

    • SHA1

      d8e1a44ae176f7fe37826194cb25c9d438473f47

    • SHA256

      616b0a152ac4eb223d66089652cad6c645e9ac2eecb536da9fe144cc8e85022e

    • SHA512

      0fda6542340439d95d8172f51b316e93eed2b73daf1541ccf8f9b43a6fb54c7d29537ff9e7b803773943c3b0819ee1f5f4ddc91c0fdf34c85a3796f433096908

    Score
    3/10
    behavioral3behavioral4

    • Target

      config.yml

    • Size

      19KB

    • MD5

      8e364b4e20d4d7b4677d3595236d4152

    • SHA1

      3f6d1ddd404100bba0eeae7761e720207f33c071

    • SHA256

      52dac5834f56523d23b7324e4ebf10d712d9f8412ebabafc2c98df00160f5201

    • SHA512

      3423ab84f6baf5735ad03fae4419a8b2663aace05a6cc05e085f572cf34fb819c521d8fb986c305c743f2128a7409a5331572eb3c429d6eb8700d9801cab40fe

    • SSDEEP

      384:EA2qQynga88EwWr+6NcZGTDfwlAZWZjwDa2DVm155KpsSbpmCTCAgj4HmRSNmE:EunUMWr+6NQGTD4lAZWZUa2xpsemCTCo

    Score
    3/10
    behavioral5behavioral6

    • Target

      litebans/A.class

    • Size

      1KB

    • MD5

      c24d737318b843476072576930c73f12

    • SHA1

      414ac46b5074425d4ca759f07225c1bd4a185052

    • SHA256

      dcd2433a29b22bbcf4fc6cfa3638973ceabcbef71923f11aac760396d5949b0b

    • SHA512

      0792fda7c1feffc3458ce9efaabf48b70686db30b5a0dd21f0d42521cf3000403015c53b04b6ab687eb5494f863cd1e0ebaaa2f5e3fa05ec52b37a0857f9be2f

    Score
    3/10
    behavioral7behavioral8

    • Target

      litebans/B.class

    • Size

      4KB

    • MD5

      4f21833f6ae6bb003b74353c1245cdf8

    • SHA1

      25dc85d71203cd0aa1174669b2ebd9fbd28d3421

    • SHA256

      228dfdd63b95bc3fc4521f3d2d4897c96dde92be09275871e65dbb58ee3111e5

    • SHA512

      23c368f986fd9ed31922cc4c4fdde2e61daaf9ef4cb760bb3226354bfc824f951cabe5db5f85ba44b18d922991cbc295c260e2cad4af37b5421a5a733fcf05f3

    • SSDEEP

      96:obUCpgAVoxrUsGExuvxTxCKlq+H7bMNWwiRtjiCam0:obUCpgAV6ZyxFlhMNn2tjir

    Score
    3/10
    behavioral10behavioral9

    • Target

      litebans/BukkitPlugin.class

    • Size

      10KB

    • MD5

      e6254325fd3dd4f8b3c6bda430cac469

    • SHA1

      334076e30d038fc9a086bcddb77f532fb830e212

    • SHA256

      11a87c8f0c8d7f8bf8a74a038c63de6cec35f0c8f73c67a369b95ecd914f48c3

    • SHA512

      e592a486d9db53f79c5df10fd68b70db532d5bdabec3e16632ccbf9f5142ea4e94fce4fa3a12997dd634db5838ca23c0e6fe46ab2ebe8d6eb863df2d8d205b85

    • SSDEEP

      192:i91vjihX/HeVBsvC1Ts97gEqDcLKcUpmEoU2tA2N7t9otOjUg2JpM3Y+yO1KM7Sw:b/aqm2tN7ctY3Y+EqMSYC0WHzmbGbvF

    Score
    3/10
    behavioral11behavioral12

    • Target

      litebans/BungeePlugin.class

    • Size

      8KB

    • MD5

      67d2345ae97712eac899795bd25b2d96

    • SHA1

      a45a03861f775ac2393f13b93b84fac0dcef131c

    • SHA256

      d3b87e03b7793954307e381aa64e12e11ef1e3154db926360f11ae4d166d6dc8

    • SHA512

      a55748e872bfce123b2eff51554ee005894ec2ad83ebbde493449605c64d7dfffd2750b816b3b80380282ac30c8fecd07b82377b04827ae34ed18c40c6e7bc2f

    • SSDEEP

      192:Tx6SoV61HapcefP7pk3cFH9GLOtpUU7EP0QbXQdK6ss+DfDiv/CPvTgKY+rDJ6gR:lDHaphJQbQIiHivTgKFA8kus70

    Score
    3/10
    behavioral13behavioral14

    • Target

      litebans/C.class

    • Size

      2KB

    • MD5

      46cf8e8c6d4697205c8dab0ea1845062

    • SHA1

      5fa1b58a4c3502429ce1684eadd23bfca5ab0042

    • SHA256

      dc90a9b36e30c7425df03625c0f7441559f35b4c6ac2f1e176fb3e98764b6483

    • SHA512

      00291582a1f3ea0885da017c12496f52f3350103f723784c758f205a8be19476de07708a7db6159d23947f482af1c81a0558174b161a395cc8ae870a5eb69e85

    Score
    3/10
    behavioral15behavioral16

    • Target

      litebans/D.class

    • Size

      3KB

    • MD5

      18ddb316e75f0d26e1109cb7e0c26779

    • SHA1

      441d659e771070b0962fc8b480225f3bfdb711e4

    • SHA256

      4c4bd0548be4e74ad0be1d756fab1b89d1b5b37c52801f926f288ec3b34df4d5

    • SHA512

      e21c3f0ca35205496bcf4132891ea8895af80798a4ce83fbdd5c2035e959d77b61bb2d1f12dc1d15e30311e49bf3f8680496fd41dd105345c2d2149a98428ac3

    Score
    3/10
    behavioral17behavioral18

    • Target

      litebans/E.class

    • Size

      9KB

    • MD5

      d688b6fea946e0d5e5ce254140691e0f

    • SHA1

      142f52dd7c784ff2ba278eba6e1b0f408779385e

    • SHA256

      b512c26d8faaeb7e0ecb9ab0c9d9d18df51b739e34c744098a00997ac9f5c446

    • SHA512

      d6ea288c42dbe40e7ee089c6e4bfb68c4f9f6149cde5377bbefcfc2df1e578d0530041a257fd273f9c0c4010c0b3fad55ed05557aeb16996baf7eed06940af17

    • SSDEEP

      192:/QNnrixWwZLg/8smVomfZiwP4QoZsMdWQ6LlOYlSnuxsthh5Nmssuzs4Ws3MkdSe:U0R8SkK1vkSP0NmssjUMkdCBe

    Score
    3/10
    behavioral19behavioral20

    • Target

      litebans/F.class

    • Size

      9KB

    • MD5

      1066f0ff4b4578f79786862d150891bc

    • SHA1

      8baa586fe0535e5ec501b40c0927ae2622f347f2

    • SHA256

      f6eadba7d9127dde48600fbc2a9e576a1a9581679cc055bce743cb2423fd12a9

    • SHA512

      6a3c6c9fb18d9da842d0e28b4c9bef3288bffeb828e180a6e24b8bd4d1e0e2673d412c14e92b8cc7e76ad4cdc1436cf9d08d0927f33e77530e6dea533d998335

    • SSDEEP

      192:NfUPNKcnBEKzSb+kI25Dp4rcl7Tz/RQWVZ71GuNmJoRLlbYUw56S/z2zZ0uD:Y0I16RLaV/z8Z0uD

    Score
    3/10
    behavioral21behavioral22

    • Target

      litebans/G.class

    • Size

      353B

    • MD5

      b8b49662939aae202009c8d2cad8fcf9

    • SHA1

      254e4801ff7008d6f9d7f0863b44a6e923ce8eb7

    • SHA256

      d31859a3c848a384872419221f153470908797cdee9a1118796a31340115203f

    • SHA512

      cefebec613e354115f45b45c270264f43a7c4055089bde2122c0a2247ef452fcd12f2ab16202f19828d171abd5ed10c2af513108fe9a970f1cf65c1802d24be8

    Score
    3/10
    behavioral23behavioral24

    • Target

      litebans/H.class

    • Size

      402B

    • MD5

      a4401858a444cc359485b455fb400085

    • SHA1

      0fc7f049ded619bc6ba90289aea5db37e5663ed1

    • SHA256

      73d57865b5e39b3d24cee085e7514d9bf470beb30938922be8cbea3f2fa28c7d

    • SHA512

      8145d2dfa9cce6e70b553d2524ef7f06b0d5933b262b374d3d04a94c3df6ac17565e146ab3570bc43d231909a67d0c8a6bc9d795f2131d2838ed8aaf5144a715

    Score
    3/10
    behavioral25behavioral26

    • Target

      litebans/I.class

    • Size

      1KB

    • MD5

      5ab064bae437db9811f04c4cb0f40f3d

    • SHA1

      13fa2559f737b03364accf534571bb511d55399d

    • SHA256

      56c4fbde5b9916edf22cd4ed4ce9f797b1e6c1650074416d90a63ff62f8baa63

    • SHA512

      fff7b4892f6f794743487b91ad3d020c25afa6847c94738a89f87cbdbaf2d9c9fd20c36d1465abdc6eae90e42c259fba171fad1c948283df82fbd334ff356b41

    Score
    3/10
    behavioral27behavioral28

    • Target

      litebans/J.class

    • Size

      317B

    • MD5

      1f289d1f8bf3a942942b6391965604d8

    • SHA1

      c919fa3f80c7f905f12cd6d85e04e954f32a46d9

    • SHA256

      7b94bc0c4d02eded9a7b778cb23bfa31b407e32c44274c7d23d03f4a238bfc8e

    • SHA512

      ff32e23328900dd9338de9e79cac3764ed5326e3824cde2b380d63f24f8bcea3710e63c4c609c633a2e6c9d5acb1fae2a8bb323a02a16e33a41bf84c45ec2035

    Score
    3/10
    behavioral29behavioral30

    • Target

      litebans/K.class

    • Size

      6KB

    • MD5

      db3f9a541a275995c5c90d214ceb5777

    • SHA1

      0ca97a1d0beb9c744634e3fd16ff17592166914c

    • SHA256

      6eeeaa3547a5e0962f9f4d2f2c5b3bcff49a26cffe2419185cc6b6d51747bf96

    • SHA512

      1ab2524bac55931ad9dd0405edd4c0f5c20c13300422b5b19bd988d967ff74dd6ee2ba15f60234e6a4555b65467d45bd3a35be02ffa84d66c8a3652201963617

    • SSDEEP

      192:cBnO/sE7c8S5zKqyq023dbKUaIwl9Kez9MSypesbVplDx0kBiTvtCbo6c7qTAvcW:eb3corfdP0WJcRbB

    Score
    3/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks