0250e924e513668276060d34fa7d2027d62de376f505c5125b129619d557f018

Analysis

max time kernel
48s
max time network
26s
platform
windows10-1703_x64
resource
win10-20230915-en
resource tags

arch:x64arch:x86image:win10-20230915-enlocale:en-usos:windows10-1703-x64system
submitted
23/09/2023, 12:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

VTOL-Mods.jar
Size

353KB
MD5

b9ce20a1213f59bc0ddfacfd786e96af
SHA1

387c61e919affbd287399764d99293fe59425ca0
SHA256

0250e924e513668276060d34fa7d2027d62de376f505c5125b129619d557f018
SHA512

9034eeef96aaefea75533295c4fae67dd2b093178790e99566a2ce07240afba98804804120a8ff40a2c751d46da38c57308dc8510f1a34028b8afc51548f90b3
SSDEEP

6144:Iph7ZHHrRQ2jXR2q75o3z/TVC7eZ0pzGSTx6RYV2mh2tpXr/RpFoC8flaj93yx59:IphxRQWnVojbA7eZ/g6CV2BXr5jkfl5/

Score

1^/10

Malware Config

Signatures

C:\ProgramData\Oracle\Java\javapath\java.exe
java -jar C:\Users\Admin\AppData\Local\Temp\VTOL-Mods.jar
1⤵
PID:5040

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\Desktop\BlockSave.3gp

Filesize
408KB

MD5
815121e650b4e0f5ea4a72d32fc0da51

SHA1
739e62d62137cc3476c3fd31957e8afdc58c5b3c

SHA256
cba147605a290372ec3b61e6d138245886299f3fa67af7c366ccfc0b4a5fd4b2

SHA512
8ac8814daa236486248c52c70bd6c610271bfc16dd5b19c0e5f7c67e85ce9410b5d572de11a600d499782ca69499e99c8da492c7cc7308d80da0f2b5f2ee946c

Download Submit
C:\Users\Admin\Desktop\CopyEdit.svg

Filesize
318KB

MD5
c068600c7d568055a691975d25fdf8f4

SHA1
2a3a85c5a27cc37ee5999f769e334f7ce3b33551

SHA256
4b3246db403b6e438eda7a2035787d03597ca43ebdfb5de72535488601f1afbf

SHA512
cf5ce0d8559fd5d0f4ffda40137d32daa1619da45c45430ebef6abec5c9c48986601b1e39bc5aaa4b5c4d773dae1c835ffe527d3f03d30854fc74ab5d1778fcf

Download Submit
C:\Users\Admin\Desktop\DisableLock.txt

Filesize
439KB

MD5
e2de6d8631773c9d4a66790175d4576b

SHA1
b85a08f4afeefb48d7110703561d3c53c6453ea5

SHA256
accc2ad0d9fefe7b152284dd1a257fc945eccef088bf0d760e51dc927f74c33f

SHA512
c6b2ab7f9c3312c16bd23f5f04df120358c027b9eee6d9e47adb72c684380f6c7acd2e7319ee8144184680fe2656ec5ff8f1f16f5e566da1940eea7bee7ff7e3

Download Submit
C:\Users\Admin\Desktop\EnableInitialize.ex_

Filesize
772KB

MD5
bae3a06cfbe2751dcf5d4eb19b1840bc

SHA1
33cd30a22964c32d73a86a61589d5f5c2c9cc1d8

SHA256
958e37c48c65356cfe01416b16fa9e74d0cde2996f0e670b094f19b74dfb8421

SHA512
a80296047ea49689cbe29810dd1365d25f9d7ea736a40ae76b2c54481c5ee54344d6632e8e8a1af30e3130e1bcf29bfce60eb072683cc6d92cd82832d41758d7

Download Submit
C:\Users\Admin\Desktop\FindSet.TS

Filesize
499KB

MD5
c567bddef8fc2e0d47265920c3840bd4

SHA1
29458b079e4037ad5e65be0b6465c16d5bd40bcb

SHA256
2d9d2337bc3494ef2109e70d249941437f9949d31f21441d397cd5004965bac5

SHA512
8c0648ae2547dce82347c2fc992266e769b42d0bd3cd60866c31086bfd715cfc07f73667f5a1320360ceb626e94e98297418a25ff14d442a4418dd5c208f40ab

Download Submit
C:\Users\Admin\Desktop\ImportRegister.sys

Filesize
287KB

MD5
ad7cc82d8a531533b610189cc8769da7

SHA1
cf2d3ab67ed4e9159176c1c6f64f7c69f66795c0

SHA256
c45333bb299e84919cec2cf8f8fc307f0fd806c4eaa6d98e141d07107f48758e

SHA512
8c0179b61c19df34e781f042581776e3d87e4809c95be7c34dd430fcf73b484f571b326ba25f6d8d3da2755002d393499ab4c3c928392015fdaed1de7e843086

Download Submit
C:\Users\Admin\Desktop\InitializeResolve.html

Filesize
424KB

MD5
4af56603418ea0e483918ec70f37fc03

SHA1
7066f5d2bf667880c279b86b31f1a70a6142e669

SHA256
94d8057062a995c7f039705f74343d6e9e242204c00f13a60f2eb91f26340fea

SHA512
66f5c5def89e23c73d6021c7884cad04ea736c85653f5f03e9ab8afea48685d078bfda9f2c2fbefe2e90630cdec784f7f90576192a12880d868c88d33987a613

Download Submit
C:\Users\Admin\Desktop\LimitSubmit.lnk

Filesize
393KB

MD5
66e0575a49aa257a04beab69d42d8758

SHA1
be1ade73c12eb7f9b5ba9c1a36df23a172043b01

SHA256
27e553e75261f37d1dadce6bc34b994daf9567c04e506a6f73c98159108ea993

SHA512
6b607808926dbb84510c19cda7c6ff4f120b6eb28413c7ed0c726707310634e999e9e628e4218c9b28aee8d50e9472efaf39bc4ad6eaf7a4fd838f3afc9c932d

Download Submit
C:\Users\Admin\Desktop\MountWait.asf

Filesize
545KB

MD5
6b16a962cd626c469b4f20c6ac6e4794

SHA1
12c1ebf9b7821c2a109b4b540986b3431c3feb4a

SHA256
33324187e1d5f086ed3a2f698c4757c56badfa4d709e1fc5f1e4968b2b3bc55d

SHA512
fcec1b23dd83d7e390f484f91e96dd08c6f73e93a661677bf7c3a0d2dfad9923ff1a1054d7c585ca20238e1414fbd7c5a12f4e18ef38541969d57bfd919901fa

Download Submit
C:\Users\Admin\Desktop\ProtectBackup.wav

Filesize
378KB

MD5
e7ce62672b4179982b7d06b5659e8b45

SHA1
0a0ce90658365c8d89a3fe652002e892ec34c1e7

SHA256
eaa16617bec8d701ce9a22437aa314471e698c122477928e0d219e8c1c704140

SHA512
1cfb26e041aef191478e16f41a60e0912da09a8e187155521fb4ab526855eea46fed1c990a17211d80a59effcaf6420c3c9a5142e3c4bb895d007f4fa52ec365

Download Submit
C:\Users\Admin\Desktop\ProtectUndo.jtx

Filesize
227KB

MD5
5118946f0f98aa56c913457873f27b40

SHA1
dbed7e5befa28d64ef3cd6224548b646f7a24ac1

SHA256
71a9f62096e81b71855732e821017da6df5fe8fa541fae00adf1bbfe47a155eb

SHA512
30236843dfc6ed078b23cb4961b80ee4a4ac2baaa0d148c6c7249e0b8c7eb08aea82bcdb1167f3be082dca7b8834e11e30205490550fb35aa9251b4ed97715e4

Download Submit
C:\Users\Admin\Desktop\ReceiveBlock.M2TS

Filesize
348KB

MD5
9d8f0387a48b677275371c35d6b0afc4

SHA1
bea9097a8c80c256f87b178df8be662dc03d543a

SHA256
b7830cebdba1045eda269da262640c4ae708c0635011b3ccae923bca1c42b5d5

SHA512
079dd790b5689e96b30b60fcdad6d8adc76706c995d8b71035bfa40c27b28feb3aaa3c2287d23452e56881b8c9059c1e9de1adce1728dd3afdcb829db87f220e

Download Submit
C:\Users\Admin\Desktop\ReceiveUnprotect.xltx

Filesize
515KB

MD5
4c5de0782185554ebbb6a3e77b82806b

SHA1
2529eade0f3bd46de8a6cf340ac613f7930d5032

SHA256
6d60e649e09ee48b7d5e9d01428e22159db8531f67e3d5cff09cf1181a0f3bd8

SHA512
2da4c8565f3fe336b9225cde914f203682e375b0ad19f2da6ae4f410a7a0f1143b30c037976e4aedf15cfda6c6cd58a57728c1300a0dbcc52eb8bb88efab54fa

Download Submit
C:\Users\Admin\Desktop\RedoGroup.exe

Filesize
469KB

MD5
c4b108a1e23e57341e58c41992a43c68

SHA1
af5d0ac6838f9b2717bb7e550a7d1948775ace1b

SHA256
3ecfa790cd2e14176e64f391a6f89ad520390dbabd5547229afb06a9e1576148

SHA512
be226d4a48a8f8d57fff6eee00009baaea3f2961555210bc161e12352339788d1ea592ece3813e1b02092690090eca6fbf42e51f40a6dc682b9333de8e162ad3

Download Submit
C:\Users\Admin\Desktop\RepairComplete.vbe

Filesize
257KB

MD5
14e890b8a6ebe27da30a7f4a045a1a71

SHA1
9568780aa80f8df918a3db275ad4b24fe197550f

SHA256
4fea26ec629460f30816d070fd9ae4de80dd22cef67c2747b4f5563db21db0a9

SHA512
d95677e7bd8c501571f427a38aee562392184427cfad77a737866b38dd08032ce4876e840951efa024cec9bde85d57b50afb6424cd9c67076fb5022c186b14f7

Download Submit
C:\Users\Admin\Desktop\RepairComplete.xhtml

Filesize
302KB

MD5
e8bb2a03b01a4cda5aadbc2506624c30

SHA1
a52504fac9999fac0589e7404bb639a08d33f320

SHA256
5accd374844dd8bc250cc092a8b953ae03299597557ed55f7ecce3e455acb58e

SHA512
a849f659ab89ef661d72acf8603da5dbdf92d0b88f457cacac13c0a167523ce6f53260e1769a519b5b47a4a4cbf9fca3f6eb36918171d0f8762f567702743871

Download Submit
C:\Users\Admin\Desktop\RequestEnter.midi

Filesize
530KB

MD5
a22cf9116302494be3f451248c158052

SHA1
fd91fc67db9caa6afd51dae2d76ac0581fa654ef

SHA256
148555c5703dbab8ad5654758bc46575ac9eb79719281189f4d94f56b349227d

SHA512
91d82ab4f8b0e11bbcedbec66cab9f60b770c22d6f2d3ccf668ca3763a4b5a86e1245de8ae1620cba6f69873c96eaca7f90c320d9fe9d98c38f56bcca038c16e

Download Submit
C:\Users\Admin\Desktop\ResetExport.html

Filesize
333KB

MD5
626d042c89baeaa42c8cc5e285ab5446

SHA1
1a0bc720674294c47bcc2f6906c575a6ea8c8013

SHA256
1c6db98edb010766f403767afa6580bf44887dc574f3acc546d98ebed29f5d56

SHA512
e82f4de73786fd5d7246d5a27b411787580c903188d28a506e8d9a329b0e146cfc1a0a0946846fc26823a74bb305376d37b97bf16343367a0ca473dc3cf2989d

Download Submit
C:\Users\Admin\Desktop\ResetWatch.ico

Filesize
272KB

MD5
5e35b1227f3f967fe2a209668b3525b9

SHA1
76df1ea5e4f2f1f9753dacc4e4c6e329e040f89f

SHA256
d23f02be55fbbc4857b619cb544bafb31f95ff0679da5a66dbc78addc7c1ec3b

SHA512
fbaa29dd6bf338b05f36c72b641e76fa87f0791d401e8a6cafd77a77d6985e7be9ddc2dd8566314f434a6ff4d3b8e28e824ed776c2e12ff90b89c3b9f6dd31fb

Download Submit
C:\Users\Admin\Desktop\RestoreAdd.vb

Filesize
484KB

MD5
df2bb7cb833ff8ccb17c059e0cf1a5f5

SHA1
941236b2e47070a9525b595e39510e12ec01c4db

SHA256
b4ac8ae5b33a1006fa1a7e2f9c09ecf3291a9eff641ae57a9a48c834d068a114

SHA512
65340bdf014f2998c771a7d16cceb1deb3141da0ab4d40cc979bb515e944da7adbba8f459a37dae6ae42a87dc215ebbb55b9e0dd5a03e02f373cd949ce523aff

Download Submit
C:\Users\Admin\Desktop\ResumeComplete.htm

Filesize
196KB

MD5
0b5b365c0d8c196de52ac815f950faf6

SHA1
e09ee2bac3ff02e79ae0c71a708c74d844f6229e

SHA256
f3aaeb281cef4bd99f6ea087d899fcee930d7e74438636316734d9c3385dca6c

SHA512
71e3bb34c2d11b39b22474c9fbe1421dcdbbd92cc6081274a1126a82691e145ca681e49f99e7dd11facd4cd69836189019690db10b41d91939d85b07efee5038

Download Submit
C:\Users\Admin\Desktop\ResumeShow.wax

Filesize
242KB

MD5
8f592a50952a8b033c80c970303662d6

SHA1
ae5772e413787f0246780159063bb2d39d08bfc0

SHA256
84a4d484c8b5aef3f81678309af6202d3b114396d6b920ac297bd3c05043cf7d

SHA512
82e4e31192ed336a9a3209d750a3871da33d947849fd39e4dd92a173da624271a9bf51129b2368d388f881fdb4c248a0ef998b8f0a2a86a3254c337cd120c3c8

Download Submit
C:\Users\Admin\Desktop\SelectRegister.mpp

Filesize
560KB

MD5
36c17c02680cc005818ce4795d5b7e91

SHA1
a920b972ab97467990c10221dec4c41b3541a5e0

SHA256
1d4292276eba48381e041929a193805fcf0d57044e2bb62b0d489d3f010808fe

SHA512
91096f50edb8abbb351bd235609e8847a659612c0aaf0fa348e2e9349cd1cc4b834083d28cd737ee91ece34b11b15fa6d853f634929cd8ee2d9bf48b8e569f6b

Download Submit
C:\Users\Admin\Desktop\SwitchMerge.rar

Filesize
363KB

MD5
2ba9a80bf0d5c3a2556b6f4dc9a51b63

SHA1
bb8ba5b2e9abac35eea8862db53a5824c89d00a6

SHA256
edd9a4d1dddb3eead98335c95bff5d45a1a2c0578c263499030de9ac1d628bb5

SHA512
9b545f6fcb0d2e9d929b573312b80b04fab0fe279d9b143b0970084d3846fd076295c8cdd564dd0a0797788b1092ee260788e63bbec34560864da00022d6a10f

Download Submit
C:\Users\Admin\Desktop\UnpublishHide.3gp2

Filesize
212KB

MD5
2bd10e15f6d8464b651bda047b402fcc

SHA1
8f3abb139bb2065089e3b407a051763392e79956

SHA256
5a0575a1964a31199627b4fa07ad2bfda9e1c34125e4015369c99f4410093fa0

SHA512
ece20ffe1da60d40731b8eba2b48659cebf695fe7c047f44fc48153bf439560ea29b9fa570dbfb243be1dc2d768fc20046914ecca04a7c5e9d96304bab154584

Download Submit
C:\Users\Admin\Desktop\WriteBackup.docm

Filesize
454KB

MD5
da0ab4e4ce4fb221047c21cc9a1751c4

SHA1
797fb073014a016013f756a7fc64bf3ca0fa1433

SHA256
e12e5ab70ed304d4e609382f14df966b65639f7bad3b3073d7160dcba0017ca8

SHA512
1b522b6e410d06b480712aa734fdf9b43bae2612340743543707f8d763807938886db6e33c42d81724bc9914d5ef3a302e9b0355343c5f7f7b1015cf2e633b2f

Download Submit
C:\Users\Public\Desktop\Acrobat Reader DC.lnk

Filesize
2KB

MD5
3b39e85344311901c88c9561ae91dee7

SHA1
9aadb31a173fdd71586133949e021f519ee0e4d1

SHA256
162987fde3e88e6b19dbe9208c279859d95bfd7adeef9fa4c29782fc61115109

SHA512
c6add5ee1011fb109906f1ce89c3ce666856c579e5849b5959917a8f9617c9f11eb9fc8d41fb590142ca255ac72a072672e5850ba504a823aa0a92bd3bea670d

Download Submit
C:\Users\Public\Desktop\Firefox.lnk

Filesize
1000B

MD5
2513716d3e5895d461d7ad46101292b5

SHA1
6acba2f4f4c410dc97cdce546ab00711345845c7

SHA256
01cf16a9a8d8ae9ea256f5922f9262c22f03bc795dee28581f98ec2c26aa1995

SHA512
fe331b7cdeb56ecfb2dd23055f3f42ba8bca14f4f79bbb6a8db07d05161f14eab89722a2c21f7d803b928e0696d0ff6aee8b62dcb5634e3aa2bbe869b2f7e4b1

Download Submit
C:\Users\Public\Desktop\Google Chrome.lnk

Filesize
2KB

MD5
4ce961fe5b247abaa0e78c653955f81b

SHA1
1ab4639929256643d8fc7628268b535c9df80dc4

SHA256
354f8b1da3cf139ab084e2b41406b93092cee6cfe22c7df7abcb82638e58358d

SHA512
9114c50b387151e3d7d459b81c624c17f8a5e7af2b26b859083836132f5a595d30cb0a34ec0ca3c763bae0fde66042a0691804c6dd7a0ff01d533cfe947c594d

Download Submit
C:\Users\Public\Desktop\VLC media player.lnk

Filesize
923B

MD5
0ad4c1908f278d6d2fadd2c6d5b21389

SHA1
beabe6bb3a28efbba6157683179154a6718b01d7

SHA256
f07ea663fca8b85f080196a341db2cae01a9e451c2409c52f19f53ef9d8154a1

SHA512
ed030b06b62dd09c62fccd9a91d4831acbd3af374cc1665c79e5ee3df1cd70f8d5ca0b9ac694e46d78c7f80fa5ac1211dc247da5708594d90f9306ad6d3b1ff4

Download Submit
memory/5040-12-0x0000000000CD0000-0x0000000000CD1000-memory.dmp

Filesize
4KB

Download
memory/5040-4-0x0000000002820000-0x0000000003820000-memory.dmp

Filesize
16.0MB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads