24a053d6cc502fd913a382b1678621c80fbab6a1d449ea8cfe2b3fe8b4b64ae0

Sharing

Copy URL Twitter E-mail

General

Target
battlyclient.zip
Size 47.4MB
Sample240222-ymd11aeh69
SHA256 24a053d6cc502fd913a382b1678621c80fbab6a1d449ea8cfe2b3fe8b4b64ae0
MD5 d8758ff2de3c97bd864cf986ff83b6d4
SHA1 71a7a1c826a80735175330ed572ac526ef2940ed
SHA512 fa0ac46bf0d7690645184ca5e9e9d3bd1b203236cc2f2eda12148852086ea6fb71a4077fc205d58b6fee4fcac63ef89296ed811e324a8215107f964ae1e5ee52
SSDEEP 786432:cRmahIJizg+tTil5c/IOMD+hwuGOJONXdgz6TwiYjHrJk8ogdhGneaTWCfzU92pV:cvuJp1c/IhOE9uz68iwrO8oiweEPVD
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery

Malware Config

Targets

- Target
  libraries/com/google/code/gson/gson/2.2.4/gson-2.2.4.jar
- Size 185KB
- SHA256 c0328cd07ca9e363a5acd00c1cf4afe8cf554bd6d373834981ba05cebec687fb
- MD5 2f54fc24807a4cad7297012dd8cebf3d
- SHA1 a60a5e993c98c864010053cb901b7eab25306568
- SHA512 d7aa9214cefb99b2f39bab6bf5718dafcb43742f8a881e5fb6cbc3a757491c0082a536ed1fef6c7168412b6e5bdec28e68a40b4d4d0b57b63a7bbc9a55f820cd
- SSDEEP 3072:kOTgHGrVYC19FDu9xp1BqCGmVas2lsKCFJYaseFPghVVv:bC8Y+9Bu9xp1Bq50a1sN0aox
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral1 behavioral2
- Target
  libraries/com/google/guava/guava/17.0/guava-17.0.jar
- Size 2.1MB
- SHA256 8c36a80ea613d0b6b8040a17cf837c5bbe3677bc1b06a058a6c174fdb787ebbc
- MD5 89fef81c2adfa9b50a64ed5cd5d8c155
- SHA1 9c6ef172e8de35fd8d4d8783e4821e57cdef7445
- SHA512 5cf3cfecd3ce604e89535f221ad23ddc8903d7e306373a2ba6709d4991eda6df842cafe6913751a25da34fdecb54d4060fe0299343cf5bb594139ccf64fb4dd6
- SSDEEP 49152:/YicgagzhhDaQWicdYwm/uSDoD7XUD7QHN1mNt5GGiw0YE1ci7Cw2vi0T1WL:/H3xzTWicSwm/uSy7XUYHN1J/FL
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral3 behavioral4
- Target
  libraries/com/ibm/icu/icu4j-core-mojang/51.2/icu4j-core-mojang-51.2.jar
- Size 1.6MB
- SHA256 147592c5eb8e11fc8394125954f877acf25918bae13aa210c2825aefc3030ed8
- MD5 aec124acf7b3c1c6ed41a6270a4452b8
- SHA1 63d216a9311cca6be337c1e458e587f99d382b84
- SHA512 ca585221ac4b06ed7b12891b43882e1c219d4656bab0f291a25fb9bd971d09371f1c8e35181a9ae5dafd9a429367ade86ec3f06eb0dc887e8a790c671132cac1
- SSDEEP 24576:RMl7QhGL9gcpfLXQfrq0FKhpcRXArrbyWgggaaDtktf1aUQJf0C36c1Nh:2FfgPHoim/uhDyl1EfFFF
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral5 behavioral6
- Target
  libraries/com/mojang/authlib/1.5.21/authlib-1.5.21.jar
- Size 62KB
- SHA256 ce7a9c86ebebf30b89929026f4a0a3c58ce0f4d47937d6dc086ae4fd0c77544a
- MD5 70565f6a4aa38a8e8541ef019adbf8ad
- SHA1 aefba0d5b53fbcb70860bc8046ab95d5854c07a5
- SHA512 7223d0e9a0c8bae870c88748008062ee1e9c659e8b1acf200ece0ab71488bd6c4447db779ae61258d07a0dbc6f46f03ad1f168d2a2cac0f758f9729b38d92731
- SSDEEP 1536:wLxCY5177oygmsyF9V6iIHStF3qXG3bhOY3NPItTacEFWD2z:wLxN5178yFlqX4bhOm+tTK
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral7 behavioral8
- Target
  libraries/com/mojang/netty/1.8.8/netty-1.8.8.jar
- Size 15KB
- SHA256 cae3de169e7695ef30079349c5ea81790bd10c04c4037196fd4fdc07b6d43934
- MD5 5da4cd5158f975d44952b929ce835b7c
- SHA1 0a796914d1c8a55b4da9f4a8856dd9623375d8bb
- SHA512 b693efc64eae075cc0130d05382d671c080b704ed0ac9880ab76b253b235dc4d7df2b23c612a574f054bca498294343430d825fedb6cffee268b786b234fc120
- SSDEEP 192:3cIJ8c6w5BWHat4ZuFTP7gcCJHhhTIv9wAlZV2J7YgfNPW0Arc935g6itQuI/rB1:sEQHatc+PgcEnIv9s/NV6yW6imuI/P
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral10 behavioral9
- Target
  libraries/com/mojang/realms/1.7.59/realms-1.7.59.jar
- Size 1.1MB
- SHA256 4a6a90ed956609d6cd3a7f84622fcac87d22e9a5d4858c6d1e965af860d07a63
- MD5 358110bc2e443ee17791b6dd4c6ac75b
- SHA1 9c6c59b742d8e038a15f64c1aa273a893a658424
- SHA512 5ffbcb54c6590fc083f5e4cad304b546805413dae25da13d7fa86f44a81e6d100c4e29783b715a3b14d39860dc10414557a58898981f6edc5ef658c3ae0d429c
- SSDEEP 24576:z4NvaydxrSk0+vPz73136oEbdm9mDL3ud5tN9+heY41uGIE:zeHdpN02P/136o4Cm/k5t6hziuGIE
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral11 behavioral12
- Target
  libraries/com/paulscode/codecjorbis/20101023/codecjorbis-20101023.jar
- Size 101KB
- SHA256 6c4b4e50e608763564afa1bde2d25ece9dd715e7c9129540faa1faded4896506
- MD5 0d622e2ac4368b5a33d540a9e4819e0c
- SHA1 c73b5636faf089d9f00e8732a829577de25237ee
- SHA512 304b55520c48d574cb046efa45687000b640937ea86119b81c152bfb192aded3de61b993bb83275e21efa4cf0f50efd3025d030b18dc1a0f53fed1dcdcb151f9
- SSDEEP 1536:WD3fa3ic1NIqIZ8CYAEsNMFpdui0VH3Bq61a4D3r1j/mOQu6+5Gy+gvocWbRtaM5:OcsqLCvmLuvNRq61aal/mPuV5VxvAWF8
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral13 behavioral14
- Target
  libraries/com/paulscode/codecwav/20101023/codecwav-20101023.jar
- Size 5KB
- SHA256 bb7d17b340afe6abdfbfdaa03683bce4aef39a64887dbab0636eaff3cf2d59ba
- MD5 f6a93b7eb8083e4ced92e7e253657057
- SHA1 12f031cfe88fef5c1dd36c563c0a3a69bd7261da
- SHA512 994af7ab19036542162d75a94dad4c7645f60626879f715d308966b8a018c84474cfcac28e2555f4a6e7a925bc919c54da276e2ee45bad2eb512ca1abeb7a2ed
- SSDEEP 96:u266mpym+KSA1ET69IjWVVWSa0OQDBrDkO2l/7FOn1fQL2MGyZ+7VoRXQn5bfyp:u266mTCjavWPbQDBrUDFOn1frcZ+xoRn
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral15 behavioral16
- Target
  libraries/com/paulscode/libraryjavasound/20101123/libraryjavasound-20101123.jar
- Size 21KB
- SHA256 333bbefeff5eb1722dc9b8d2e26c38bc69c1efa07d0ca870480f29d8858aa336
- MD5 247b45f9d2f0071ad543c14d0ff31d5c
- SHA1 5c5e304366f75f9eaa2e8cca546a1fb6109348b3
- SHA512 eac73f86f1f85c94f5df309c4a27b02ce33e63635ef731e088f4dbeae2679d837c0a82efd96d853bc0a193edf5636d949a91b41e2b43de8bfbe376d2e717984c
- SSDEEP 384:W2VUwbXPC75ni2FgZY1KUS90tkUDp1cdUVD7DkbMNG:W8U+KVjFgZwCgkUDp1cGvQbYG
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral17 behavioral18
- Target
  libraries/com/paulscode/librarylwjglopenal/20100824/librarylwjglopenal-20100824.jar
- Size 18KB
- SHA256 107d11509f6af59b8c2ba23df828bc5d3c4e067b58f3d858c7deb90ca5308f84
- MD5 93730cef2e75762c5a1431c6d7a0c78e
- SHA1 73e80d0794c39665aec3f62eee88ca91676674ef
- SHA512 0e0956a0c16943c3bbeee89b17a556b2f4a57e7d87db1bca2449a77517c46559f4b2dcb541695f89693fedb533e627671466915758dd0f0299477bf374a58dc8
- SSDEEP 384:O2/pcGf9gGBkuFKfPfznT+CMpKfPMc77Jh4HDOobTYR3IWO/t2WEfF+/jgWlfuUW:O8pcGFgYkuFieCM+H4HCR3IWgt2B9+/o
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral19 behavioral20
- Target
  libraries/com/paulscode/soundsystem/20120107/soundsystem-20120107.jar
- Size 63KB
- SHA256 2882d64550240dd0c026724da664d9f97ef205c91d6a85273d10790d88608f34
- MD5 6d9d7d6c163caf74984465694d3566e7
- SHA1 419c05fe9be71f792b2d76cfc9b67f1ed0fec7f6
- SHA512 8b5c995c3ba0b58f60269793418f3d52c766fa182c92bb76856b7bb7fb79e7c74eecea8d50fc1fac665328b00474851a8ea0c959373d84269e550ad1cb6e327c
- SSDEEP 1536:23mMk864MtuifaWl5dpNaN7r7F19bsrHlpmruKhoR/lVdcGuce:j867FSWl7GNfL9ArHlpm3g6we
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral21 behavioral22
- Target
  libraries/commons-codec/commons-codec/1.9/commons-codec-1.9.jar
- Size 257KB
- SHA256 ad19d2601c3abf0b946b5c3a4113e226a8c1e3305e395b90013b78dd94a723ce
- MD5 75615356605c8128013da9e3ac62a249
- SHA1 9ce04e34240f674bc72680f8b843b1457383161a
- SHA512 b65531ead8500493e3dd14a860224851b80f438fc53bf8868b443a0557d839a2b0c868e4fedcf99579ae04b6b2bbd8cdb37f9921ad785983c37569aa9d2e8102
- SSDEEP 6144:7P1UfNFAs0rRzuGrHfumymG2w63GhctKS/VTcbbNbIR:7P8AsoRNrHfumy1pRyQnNbY
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral23 behavioral24
- Target
  libraries/commons-io/commons-io/2.4/commons-io-2.4.jar
- Size 180KB
- SHA256 cc6a41dc3eaacc9e440a6bd0d2890b20d36b4ee408fe2d67122f328bb6e01581
- MD5 7f97854dc04c119d461fed14f5d8bb96
- SHA1 b1b6ea3b7e4aa4f492509a4952029cd8e48019ad
- SHA512 957a438894a196e534af9ae1e61fb21e16f273952b55a81abb8faf0b139fc031ea940cf477f81704db417d1ce6ff2d9ddd4a2cbf316903b0e2dc1aeaef24f292
- SSDEEP 3072:pF6mb9NczTyPXoTt75AQ6oBoEfDmwFHb/1Vd23l/ODoxb7DcKK:pYmb9iz2W75JLKEfDmwTVdilnxb7DTK
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral25 behavioral26
- Target
  libraries/commons-logging/commons-logging/1.1.3/commons-logging-1.1.3.jar
- Size 60KB
- SHA256 70903f6fc82e9908c8da9f20443f61d90f0870a312642991fe8462a0b9391784
- MD5 92eb5aabc1b47287de53d45c086a435c
- SHA1 f6f66e966c70a83ffbdb6f17a0919eaf7c8aca7f
- SHA512 e5d1fc8ec4544e1fa0f7c4aae8dbcca466c4987bc92fbbc430b054b10d646b745add4a754b1be9d50edd64330c798c53173a97289db57a966312e16f934e9d1f
- SSDEEP 768:Oirgim03eHcOSlWmuvjpNToHSQfWZy2VDfEXsHtprlPox2u+nA5q5ddrSxw3qKrg:Xtmjc+TbT4SKQ5VD7Zi2u+niSddrtvrg
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral27 behavioral28
- Target
  libraries/io/github/battlyclient/wrapper/2.0.0/wrapper-2.0.0.jar
- Size 22.3MB
- SHA256 9ea97aa2a638b1aaace55583999d34d2f1b49b4f65b414aa9e8035eca095c247
- MD5 a4bd59913d99fcdf907582e651e73adf
- SHA1 450e6e897d2baf1e7dbfc76fcf4b57ea7ba64223
- SHA512 2c8e6266cbcd466998d81c6bd602d1012ca5ae0cc9cc5fd0563d73349951c1713fa009eeed4d0ffaceaeb59a56fd82b43ce16a3d443220473f63d8118b901306
- SSDEEP 393216:uF+Vl3bNaFHtkdNvVvmDLpb7gli1MyuINXSi2FsTCV:uFekFNkpCmivuEXPBTCV
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral29 behavioral30
- Target
  libraries/io/netty/netty-all/4.0.23.Final/netty-all-4.0.23.Final.jar
- Size 1.7MB
- SHA256 50510e9c9874b539b98ef931fe7eeeb002f6b5b1976ea37669b9493426294561
- MD5 4725826ca7ba3713db6748ee8f3906c3
- SHA1 0294104aaf1781d6a56a07d561e792c5d0c95f45
- SHA512 80fcf9653620a614fb444d039c8bd8c195db25cb16f39ccccd87c1434fbc836c66f792e7717cc989b66d57c0a86365b8ae051c107916c231d4ecd0b4d2908490
- SSDEEP 24576:eTZZySEwtY+G2WZeW58R8ThJZw62EgC6fCyL1zjLr6NewH5pWzwNdemBpC7+RjiM:Qz1En2WX8qXK62666UzvWDZrNdemBmOz
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

T1222

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Modifies file permissions

Modifies file permissions

Modifies file permissions

Modifies file permissions

Modifies file permissions

Modifies file permissions

Modifies file permissions

Modifies file permissions

Modifies file permissions

Modifies file permissions

Modifies file permissions

Modifies file permissions

Modifies file permissions

Modifies file permissions

Modifies file permissions

Modifies file permissions

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32