53eca4e7e09796a9c547e9aaaa9b4718bed3d61675197e377b2adba0c36729d9

Sharing

Copy URL Twitter E-mail

General

Target
jdMinecraftLauncher-5.2-WindowsInstaller.exe
Size 97.2MB
Sample240221-plqtqsfa81
SHA256 53eca4e7e09796a9c547e9aaaa9b4718bed3d61675197e377b2adba0c36729d9
MD5 6a21aceb285fd0e970afa82da8713ee1
SHA1 cdc0372b26b528c61616b37cf646570659349728
SHA512 3c8a8778d29958c3b0a1e3c03d412c0676e74dab39431a9dc85377b92696d754742ef7bef7f4bbdfcf2c9eeecca6f37e72c7e867dbc953110e3e63207304f1f3
SSDEEP 3145728:IHkUT0kh2xnZ+yi/q8GI6T1MwmVR21UqljpoQan:UFT0m2a/qbgwmVLMoQan
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Targets

- Target
  jdMinecraftLauncher-5.2-WindowsInstaller.exe
- Size 97.2MB
- SHA256 53eca4e7e09796a9c547e9aaaa9b4718bed3d61675197e377b2adba0c36729d9
- MD5 6a21aceb285fd0e970afa82da8713ee1
- SHA1 cdc0372b26b528c61616b37cf646570659349728
- SHA512 3c8a8778d29958c3b0a1e3c03d412c0676e74dab39431a9dc85377b92696d754742ef7bef7f4bbdfcf2c9eeecca6f37e72c7e867dbc953110e3e63207304f1f3
- SSDEEP 3145728:IHkUT0kh2xnZ+yi/q8GI6T1MwmVR21UqljpoQan:UFT0m2a/qbgwmVLMoQan
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery pyinstaller spyware stealer
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2
- Target
  PyQt6/Qt6/qml/QtQuick/Controls/Basic/impl/qtquickcontrols2basicstyleimplplugin.dll
- Size 68KB
- SHA256 be3d511d8f45e2f34b29a3e7b7a38a3eb7f1ba4b89ea2aeda37d842fa880c2ce
- MD5 7a3c3a179bdf918fcbed4de6d52755db
- SHA1 effbebab9eb61581531d8f4438a3b1152b6b2ab8
- SHA512 a1d7536479a37fc9f826ea17d6ce2c8e8bdbcedb53d909bf376fb65f0525ae70c1b733e4efb3f7cdf70f28c549a42022b06d6c34af823f9fdaa1919db58b2465
- SSDEEP 1536:s0kFVBSnL/ERu1wDBB0f+qG9c4JYZgKxngeRHEEHG:s0knsnL5WDy4JYmKqEm
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral3 behavioral4
- Target
  PyQt6/Qt6/qml/QtQuick/Controls/Basic/qtquickcontrols2basicstyleplugin.dll
- Size 1000KB
- SHA256 e6c6118d27417f65de1471b83ce0fef7c976c011ef3b657a6181337db06ce5bc
- MD5 2dafcefc18b16449c5f2e0b016300f0c
- SHA1 382217aed08c3473c859b0105765b1d9d7431551
- SHA512 e5de12cd474de0063de0bffc8b0516623a2d79251df6f88ee53141b3b1148ee4b8d2efa8ae7f3cc09506f0cf7ec253f9da650d4547b071dfd5df53823c803d52
- SSDEEP 6144:v1qKwFM5QMTgCPqdHUuHX4DX6YZOaI0m4dcEEEHXIan6Tsd28R3Ec:xA9KPqOuHX4DX6UOaIcb3Ian6TQR3Ec
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral5 behavioral6
- Target
  PyQt6/Qt6/qml/QtQuick/Controls/Fusion/TreeViewDelegate.qml
- Size 3KB
- SHA256 9c41ebd36b60025068435fc399b5d430578316ce9bf6e1e0a93e111559630606
- MD5 f6a0232a3b2350eba2cb692a74759327
- SHA1 08f9811d5e90fd0f352822d78719c0a18fb37b00
- SHA512 13a56176729c8e5c81b13e78526b6442e0f060ec0d6fea6f8901934ebbc80f8da3086a394e68c1e5a6b6df1438528aa19ab5ac13f56084e06abfa4dd50a51c0b
- MD5 SHA1 SHA512
Score

1^/10
behavioral7 behavioral8
- Target
  PyQt6/Qt6/qml/QtQuick/Controls/Fusion/impl/qtquickcontrols2fusionstyleimplplugin.dll
- Size 147KB
- SHA256 2a7cec62ee48f1fcc931999e8e35f950f4c46d93258f9d85a4236ef550ada12e
- MD5 176467032e8e09e6c1be3cf3439c5316
- SHA1 5a277c94e362d5e27805e04f623d68e486103169
- SHA512 6560e1ac3b2fecec2890bfc750e97463852d2a1621933c444949d3831c1f560f6a23709e3cf7d34ab95745902f965bb8f262a147e658e26ee5c718197d0055e8
- SSDEEP 3072:6D5tW7nMeQVWr/iOsYfrWuT7TN7XVPVKZEg:ItGKOXFn7oZEg
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral10 behavioral9
- Target
  PyQt6/Qt6/qml/QtQuick/Controls/Fusion/qtquickcontrols2fusionstyleplugin.dll
- Size 918KB
- SHA256 ee106f1c911b14398fc29be4cf1c351d2def879d87c015add307ca556cb3d72b
- MD5 e4e2318d17bee19d38f39232028b9331
- SHA1 9cd82accc071c12b001ca1a0679bc6abe13eae24
- SHA512 5d7d03d7bb347386479b7216ad6728f0d3952f0015dc18cf478f7cc2ba3d108dd229318ef80b331915f0954a20eff36e873af418fd81a2ed7a92537f4e57b059
- SSDEEP 6144:4q+wq3bp700keW+9RLkmNrrHFBg1A2fKsnGJerXkQVjec2rpBDiEh:Mwop700ZrEm/bg1zT0erXvVxgiEh
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral11 behavioral12
- Target
  PyQt6/Qt6/qml/QtQuick/Controls/Imagine/impl/qtquickcontrols2imaginestyleimplplugin.dll
- Size 52KB
- SHA256 a12230ab92794017a3f2d364f11bf951afc19fde4652e1715c8fb25e4104a9cf
- MD5 b809f6f31ab79ac93440f5bcbc375f9e
- SHA1 7827c6a26934db854af3dba6324a9001ed59aa18
- SHA512 26e632192ad895a831611e2851ba413fd7f30c4d1c79b08f8683a64b002bd2252e55c974727672b24afae5dd4091e563b1012770eaa57d914dbcedb5fdb28670
- SSDEEP 768:Bev2/jKNxWAgDz/pdBb+Sk6UzgKxnVbGYJlhKmN0EHO:BeuGNxWACBXb+SkjzgKxngehKTEHO
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral13 behavioral14
- Target
  PyQt6/Qt6/qml/QtQuick/Controls/Imagine/qtquickcontrols2imaginestyleplugin.dll
- Size 1.8MB
- SHA256 33c18e7917c35075af4e3516ee9e90903e4e299fd3a80e7f8cb50bcee090ef0a
- MD5 98a332a9ef8bb750df16a3a76158c02c
- SHA1 a33631ff83f835268ed5bcb729da58b923fc8d70
- SHA512 3df3eef41de7cc4dd67736c873cba730adcaa7af2414890eff76a46e3bc14c1c0f2e1d18398136c0c11c23486b99c122f3b22cf3467619ffdebe0fb6055ec671
- SSDEEP 24576:vbmGcarENMjl5h1Za1zH/V9gpoWVu+Ep1mv/CJAKSP:X6NMJ/rahHN9gKv+Cmv/CJA1
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral15 behavioral16
- Target
  PyQt6/Qt6/qml/QtQuick/Controls/Material/TreeViewDelegate.qml
- Size 3KB
- SHA256 e199257d0bc4bcf8bb8b2225dd2ac886ee18fd44974b712be06abc145411e945
- MD5 ec1d60b6623a000f2c3d9776e53f8c13
- SHA1 7fac65b966cd0b802e557528d05bf7a68b2d8aed
- SHA512 c2d96e174d4203039c0749488dcb8e1f96931269a8866862ae849b5116db19d8d8207bfcc15fbccb2fb174ddb2b68b7de03b79d48137e71c9fa8f386e69c567d
- MD5 SHA1 SHA512
Score

1^/10
behavioral17 behavioral18
- Target
  PyQt6/Qt6/qml/QtQuick/Controls/Material/impl/RectangularGlow.qml
- Size 6KB
- SHA256 7de16148d42c6f299888d2bcfcad77b3b0cc20ca1a70357b5a32498b9a2a3ae4
- MD5 21b864b7af01baf694fcee01e3229cba
- SHA1 6f5d1ea2ee419f4bd61db20e064ac35b32d9df14
- SHA512 50560e2e28eefba74da54bc332abdf522063341527fb43ba37e2953184878c9be7fc2799a1c4bbc6c552e77ef58118b7342a8933c0b34f1dc1d6043fe319a1ae
- SSDEEP 48:Yxxwsio5JAS44kH1KWRmoAAJ/H0SAAd449lM688YAAd44dpYG7ECyNfRjEzVTmiw:YLJA/RmEZRMTmtnWwbQ9VA
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral19 behavioral20
- Target
  PyQt6/Qt6/qml/QtQuick/Controls/Material/impl/qtquickcontrols2materialstyleimplplugin.dll
- Size 255KB
- SHA256 0ba117c74f9f05b267a327ed34a9e3406ffa1a0fff0140d05c36da9377261dab
- MD5 dd701049c2a5a978e97b20943ff261c3
- SHA1 482439b0c70e4873a0a6c4d30434c3b4108144d9
- SHA512 c44a2cb73a45ed46168390c71ae07373752b60a5f66394e3f0724ec9655aa9032c27b5b0a08848810d838597f76bed5280e5ec00e1f6810d9e9591dce2aa713b
- SSDEEP 3072:xcUrf5dUEgicx42ZxEQPGVoxJrUjCQirAk2ZAjpxPskk4CZARSU5JAKfWEQ:xc2daZQQrdUfkiAPCZARXzfWEQ
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral21 behavioral22
- Target
  PyQt6/Qt6/qml/QtQuick/Controls/Material/qtquickcontrols2materialstyleplugin.dll
- Size 1.1MB
- SHA256 d7bdff0c1c98c73e16908ebe252eea8ea794a85f320438746e938a5f6b840c7b
- MD5 f645d9e81fad4075a07c8c7c2f0d20a0
- SHA1 b5899f8a5c9f2b0048eb80b54449be3776f60e17
- SHA512 d7a71ea3c43839241fab7008ca494c9180ebab1db80313ddabf9a0135eb53594e4a47f761eec0ef212f2d3265b0425da49533d30480719d640eb49e78877a4d1
- SSDEEP 12288:C0WD1XxTFgSnWKQS6e4j5NEtk/UVoOMIqAYM+Ec/DR/Z/gCDXjvlxA23kTonCC9C:QDrHn9QS6e42sbietel7
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral23 behavioral24
- Target
  PyQt6/Qt6/qml/QtQuick/Controls/Universal/impl/qtquickcontrols2universalstyleimplplugin.dll
- Size 116KB
- SHA256 dccd3f54ee09d74165d28bdd0ca3b71a15b0ac3ab003641944fa1d41ff4a67a7
- MD5 799e53c8a00e859f2739142edf17f797
- SHA1 6de022222a85f758d3ff8fb60a41dffca5dd2338
- SHA512 5b3c52f0ef2d31da6e1605d6354ec0e4a20fc2370bd39daa8fffd54b2b7c1d4015ef5345bb2dcb701ba8f925a96085734944f22d180c6e2f798ece0ca34e0432
- SSDEEP 1536:1n5dz7vyGGawNi5vN3ZqFFnwQzfczcvRIQnuekgXqqQDir1FbG+UuGKW+KOgKxn4:1nUDJzfczYRIQnuekgXcDSbQXlLKEEQ
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral25 behavioral26
- Target
  PyQt6/Qt6/qml/QtQuick/Controls/Universal/qtquickcontrols2universalstyleplugin.dll
- Size 942KB
- SHA256 68237153960690c10c9d612964e2db8f49c48df4854ff4b5d246cb327c5b7e10
- MD5 0e0cc3f0d375f9088e01c014ad3dca9a
- SHA1 19c00bfe751be2875ee95aeffd30c2153cd5ffc2
- SHA512 9369c885a8e41450dc9f18170951b2a22e77c9d6562ad4e705da57f5108d306ce61f078975caf09a2138b566334af86b4349a5b3dbd7e39eb3aa00d57e411d50
- SSDEEP 6144:7aQpEmbPXZVn6SYwE6w0/nVyX71O5wMUClI8WGHH+kazc7qEg:wSPZh6SYf6wOyXJspGsN7qEg
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral27 behavioral28
- Target
  PyQt6/Qt6/qml/QtQuick/Controls/Windows/qtquickcontrols2windowsstyleplugin.dll
- Size 202KB
- SHA256 c620b7e2d66b8feda7794f1b1dd42008daf2ea60fe92016ae5b7b38c5e12d152
- MD5 83d92ac421b16b8625057cde01b99bbf
- SHA1 890980a4afea18a27f6ce9df23be528d79d11cc6
- SHA512 f2d325ba892677608aed5610efe5faf168df3b7c979813b0f081fca50afac11e3b44561de98c1188c2f09175cb19718e69dbc8835dcace53191e8e49b05d4462
- SSDEEP 3072:AdjNH5I8MvX13VXdIEf+XHITZtoJpewk1e/KzE3:yjo8MdZTZKlk1RzE3
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral29 behavioral30
- Target
  PyQt6/Qt6/qml/QtQuick/Controls/qtquickcontrols2plugin.dll
- Size 39KB
- SHA256 3a4ffcf29a92ac8df512e7f22c0a8db6ceb41a3662df9066d7feae60b20a2796
- MD5 f09d9066a9455131a1b63d5c1b7898fe
- SHA1 e7c2c05ceb21d25a5ba5f2acba447ea2f90085b0
- SHA512 57bdc43d55c885ce642cd4264be35657a8fd574d5b904abfe69c3803032ff27b7c469d7f9a136210b9bd25d0df8fde6607e34e6177d71b940ac3c289749297a7
- SSDEEP 768:pEWzHBsIpELnC3TLhlsgKxnVbGYJlTTN0EHVx:pEWrh+ujLhlsgKxngeTSEHn
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Executes dropped EXE

Loads dropped DLL

Reads user/profile data of web browsers

Checks installed software on the system

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32