a0f4104801d1d248028bd51f896d752aef1f183c2d4f85a396234880dc3ce4a0

Sharing

Copy URL Twitter E-mail

General

Target
mindustry-windows-64-bit.zip
Size 80.9MB
Sample240223-rnfgwsah92
SHA256 a0f4104801d1d248028bd51f896d752aef1f183c2d4f85a396234880dc3ce4a0
MD5 df487ea034335c52c80eb4ad88831edd
SHA1 e43a4ae9b6823bdbf7d4da3c6ab57c725068790e
SHA512 f9c6479fbaae5ae8febba009e85b1d9ee1635d79b28b81da9641013b7616c74ba947f198905f6c30fb5c0d3b863fad424e40119150cc96b333d768c829ffe664
SSDEEP 1572864:Asxsas9GlevIrazXvxxhRsnMKKfD00TNSEMJQtFeeFL51h16S0H8ghGSUK:vsQgjrhRsnM9NS1JQ/HL51hD0GSJ
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery

Malware Config

Targets

- Target
  Mindustry.exe
- Size 584KB
- SHA256 f9afb4ade0ba4d8cd758fabdb9cd76af2c72b59130140604b29cf02295b74569
- MD5 07f788dd556b612fd064a73913f82bfc
- SHA1 3abe2d614dc63ca4d6b9907d36d5c35bd54cf020
- SHA512 68de704e7248e647744a44c5cc46b08c97f5c80ae73e009b6c45367dd6691bb331b6d3cf7a0d4503c60be1361f59c734499c77ba1ea5b5b8448a44d5d3385e38
- SSDEEP 12288:cPpWdd4P5jtbIHMavP0JLk2KgszHpaHwZMTVLzRBYkd2pA7okT1KP:cPpWdd4P5jtbIHMavP0JLk2KgszHpaQE
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1
- Target
  jre/bin/api-ms-win-core-console-l1-1-0.dll
- Size 18KB
- SHA256 9f3608c15c5de2f577a2220ce124b530825717d778f1e3941e536a3ab691f733
- MD5 e5912b05988259dad0d6d04c8a17d19b
- SHA1 724f4f91041ad595e365b724a0348c83acf12bbb
- SHA512 c270a622d7887f4c97232ea898f5380459c565817f0d201cdb081ee82e3002b6e6248753a68da896d3b1327f93e8e8cb0ca0dcaeef324f610e0a1c7b542c6492
- SSDEEP 192:PaW1hWiZqe8Cjdks/nGfe4pBjSYqW/nW5RKTt3E2sVWQ4GW5rYZpqnaj71nxPI45:yW1hW4r1m0GftpBjQm3SllndaVrQ2W
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral2
- Target
  jre/bin/api-ms-win-core-datetime-l1-1-0.dll
- Size 18KB
- SHA256 3b68d7ab0641de6b3e81d209b7c0d3896e4ffa76617bbadd01eb54036cdd1b07
- MD5 16789cc09a417d7deb590fffe4ed02dc
- SHA1 4940d5b92b6b80a40371f8df073bf3eb406f5658
- SHA512 19e4f086cc2137ee60316b0736b3c6b3780578896df9a826edfe004bb74bee8e051c511a84d8a7ea278a5f47c82b9c955394f629ab0bb0740ecb51293d9be7b7
- SSDEEP 192:aUW1hWi8dsNtLxCjdks/nGfe4pBjSYvQF0RW5RKTt3E2sVWQ4GWsTJsqnajkZtT6:HW1hWfsngm0GftpBjmtm3SglmTok6
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral3
- Target
  jre/bin/api-ms-win-core-debug-l1-1-0.dll
- Size 18KB
- SHA256 55574f9e80d313048c245acefd21801d0d6c908a8a5049b4c46253efaf420f89
- MD5 9476affaac53e6e34405c4001f141805
- SHA1 e7c8a6c29c3158f8b332eea5c33c3b1e044b5f73
- SHA512 f8e3476a09d888caebd50da0ea2debc4006004e72af677919413655ab4595622cac524f1bc6c13406ee341ae0052a19ed83826ad530f652e73b2c65d4fa65680
- SSDEEP 192:2W1hWi9cvHCjdks/nGfe4pBjSYLky6b+W5RKTt3E2sVWQ4GW2y9jqnajXagRbG1d:2W1hW+Qim0GftpBj81nm3SMlDCED6
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral4
- Target
  jre/bin/api-ms-win-core-errorhandling-l1-1-0.dll
- Size 18KB
- SHA256 b3715112a7ca4c6cc0efee044bd82444d3267a379e33a3ec118d87e75604204d
- MD5 a5883c68d432f593812ab3b755b808db
- SHA1 51cbb7ba47802dc630c2507750432c55f5979c27
- SHA512 27153e29e99a905fa4c8b3ede078644a3a3f29fdf7b98e387e39c5c60444e326c92afd74da8fee225f7ddf39724a0daef68ba238f3cc64fb7860172b8f29d79a
- SSDEEP 192:8mxD3uLW1hWioedXACjdks/nGfe4pBjSYTdvW5RKTt3E2sVWQ4GWGCWkqnajTWOj:8BLW1hWeXRm0GftpBj8m3SclgCohax
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral5
- Target
  jre/bin/api-ms-win-core-file-l1-1-0.dll
- Size 21KB
- SHA256 56de091efe467fe23cc989c1ee21f3249a1bdb2178b51511e3bd514df12c5ccb
- MD5 241338aef5e2c18c80fb1db07aa8bcdf
- SHA1 9acbeef0ac510c179b319ca69cd5378d0e70504d
- SHA512 b9fd37f01a58594e48fa566c41827b2b9499605d9e55c2178e83ee41c8c5f50a4df2c85efea94ca586ea0ea4a6d984ebb7ca2193e9306fcb853b147b2c76bc2d
- SSDEEP 384:TBPvVXcW1hWYDzDm0GftpBjrm3SXjltFpx:VPvVX/TViNZ
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral6
- Target
  jre/bin/api-ms-win-core-file-l1-2-0.dll
- Size 18KB
- SHA256 322d963d2a2aefd784e99697c59d494853d69bed8efd4b445f59292930a6b165
- MD5 49c3ffd47257dbcb67a6be9ee112ba7f
- SHA1 04669214375b25e2dc8a3635484e6eeb206bc4eb
- SHA512 bda5e6c669b04aaed89538a982ef430cef389237c6c1d670819a22b2a20bf3c22aef5cb4e73ef7837cbbd89d870693899f97cb538122059c885f4b19b7860a98
- SSDEEP 384:aW1hWF5OZkum0GftpBjjNWm3S0ZlmTof1:JKoViqi1
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral7
- Target
  jre/bin/api-ms-win-core-file-l2-1-0.dll
- Size 18KB
- SHA256 1ea267a2e6284f17dd548c6f2285e19f7edb15d6e737a55391140ce5cb95225e
- MD5 bfffa7117fd9b1622c66d949bac3f1d7
- SHA1 402b7b8f8dcfd321b1d12fc85a1ee5137a5569b2
- SHA512 b319cc7b436b1be165cdf6ffcab8a87fe29de78f7e0b14c8f562be160481fb5483289bd5956fdc1d8660da7a3f86d8eede35c6cc2b7c3d4c852decf4b2dcdb7f
- SSDEEP 384:eVrW1hWbvm0GftpBjzH4m3S9gTlUK3dsl:eVuAViaB/6sl
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral8
- Target
  jre/bin/api-ms-win-core-handle-l1-1-0.dll
- Size 18KB
- SHA256 8ee2de377a045c52bbb05087ae3c2f95576edfb0c2767f40b13454f2d9f779de
- MD5 cce27ff9b1e78b61955682788452f785
- SHA1 a2e2a40cea25ea4fd64b8deaf4fbe4a2db94107a
- SHA512 1fcec1cd70426e3895c48598dfc359839d2b3f2b1e3e94314872a866540353460ec932bf3841e5afe89aa4d6c6fac768e21ae368d68c2bb15f65960f6f5d7d5b
- SSDEEP 192:yW1hWBJ9M7tOZk7Cjdks/nGfe4pBjSYj+a2W5RKTt3E2sVWQ4GWJ9xqZsqnajkZ9:yW1hW+5OZkum0GftpBjt7m3SlGlmToC
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral9
- Target
  jre/bin/api-ms-win-core-heap-l1-1-0.dll
- Size 18KB
- SHA256 87a5c5475e9c26fabfead6802dac8a62e2807e50e0d18c4bfadcb15ebf5bcbc0
- MD5 cdc266896e0dbe6c73542f6dec19de23
- SHA1 b4310929ccb82dd3c3a779cab68f1f9f368076f2
- SHA512 79a29041699f41938174a6ec9797faf8d6bf7764657d801cb3af15c225f8eab0135d59cfa627bd02dd7459f7b857d62299e4d082586ce690627ebdf1267ebb21
- SSDEEP 192:fZlgW1hWiR+49Cjdks/nGfe4pBjSYBPq+W5RKTt3E2sVWQ4GWDG2Oqnajd2si3TT:hlgW1hWP4wm0GftpBjVsm3STlM/
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral10
- Target
  jre/bin/api-ms-win-core-interlocked-l1-1-0.dll
- Size 18KB
- SHA256 5cd00ff4731691f81ff528c4b5a2e408548107efc22cc6576048b0fdce3dfbc9
- MD5 39809cc5dabf769da8871a91a8ed9e69
- SHA1 f779cdef9ded19402aa72958085213d6671ca572
- SHA512 83a8246839d28378c6f6951d7593dc98b6caa6dbca5fbd023b00b3b1a9eba0597943838c508493533c2de276c4d2f9107d890e1c9a493ee834351cff5dfd2cab
- SSDEEP 192:CW1hWiRnedXACjdks/nGfe4pBjSYC6rSW5RKTt3E2sVWQ4GW+60yqnaj/6g6dqpl:CW1hW3XRm0GftpBjl7m3SOLltFpU2
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral11
- Target
  jre/bin/api-ms-win-core-libraryloader-l1-1-0.dll
- Size 19KB
- SHA256 8e01eb923fc453f927a7eca1c8aa5643e43b360c76b648088f51b31488970aa0
- MD5 5d5fae1a17961d6ee37637f04fe99b8a
- SHA1 47143a66b4a2e2ba019bf1fd07bcca9cfb8bb117
- SHA512 9db32ec8416320dcb28f874b4679d2d47a5ae56317fdc9d2d65ebb553f1d6345c3dd0024294a671a694337683dd4e77254595a9cdbfe115c80d0ef53516d46aa
- SSDEEP 384:KvuBL3BYW1hWp5OZkum0GftpBjPJm3SyAlJrqsK:FBL3BTioViH+ElK
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral12
- Target
  jre/bin/api-ms-win-core-localization-l1-2-0.dll
- Size 20KB
- SHA256 a07cc878ab5595aacd4ab229a6794513f897bd7ad14bcec353793379146b2094
- MD5 588bd2a8e0152e0918742c1a69038f1d
- SHA1 9874398548891f6a08fc06437996f84eb7495783
- SHA512 32ffe64c697f94c4db641ab3e20b0f522cf3eba9863164f1f6271d2f32529250292a16be95f32d852480bd1b59b8b0554c1e7fd7c7a336f56c048f4f56e4d62f
- SSDEEP 384:XOMw3zdp3bwjGjue9/0jCRrndb6kW1hW85OZkum0GftpBjcqEm3Shupl4aRGWa:XOMwBprwjGjue9/0jCRrndb0noVialbj
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral13
- Target
  jre/bin/api-ms-win-core-memory-l1-1-0.dll
- Size 18KB
- SHA256 c2e887a17875d39099d662a42f58c120b9cc8a799afd87a9e49adf3faddd2b68
- MD5 6def20ed13972f3c3f08dba8ecf3d6cc
- SHA1 9c03356cf48112563bb845479f40bf27b293e95e
- SHA512 5b4d2b1152bed14108dc58d358b1082e27defd1001d36cd72ec6f030a34d6caf9b01c3c1dd8a9ac66d1937fcf86a6fe3469ac93b1e76d933a8f4b51c1f782f65
- SSDEEP 192:E8W1hWiEUcvHCjdks/nGfe4pBjSYY3iW5RKTt3E2sVWQ4GWRRhbOqnajd2si3Hv:E8W1hWXUQim0GftpBjMnm3So3ylMHv
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral14
- Target
  jre/bin/api-ms-win-core-namedpipe-l1-1-0.dll
- Size 18KB
- SHA256 593fa2aa2474508ad942bbaa0fdc9a1badd81c85b0dff1c43b90a47c23ad5fb7
- MD5 a056d4eeaae37deab8333dcc4c910a93
- SHA1 cb59f1fe73c17446eb196fc0dd7d944a0cd9d81f
- SHA512 c2f811994182ef51d0c011c19336179da69357e5f284f787bcdb54f90c32768a959232a477534f7e62cd3d71a048a13e91b20042e2fe6ab108d606c7c8df9255
- SSDEEP 384:eW1hWU5OZkum0GftpBjxKvm3SQTlUK3dsDT:1noVimvf6sDT
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral15
- Target
  jre/bin/api-ms-win-core-processenvironment-l1-1-0.dll
- Size 19KB
- SHA256 ea2972fec12305825162ae3e1ae2b6c140e840be0e7ebb51a7a77b7feeda133a
- MD5 f3b4ab35a65a8d938c6b60ad59ba6e7f
- SHA1 2745259f4dbbefbf6b570ee36d224abdb18719bc
- SHA512 a88afb66311494d6c15613c94555ba436cd2f75e11a49a448c9c6776dfba24cda25a44792a1e8b3e680c1ad3ad0574b43ac2328c6e41ff0832139c94b066dbf5
- SSDEEP 192:XnW1hWioe8Cjdks/nGfe4pBjSY6ydpW5RKTt3E2sVWQ4GWwvcUV2HPqnajkSXt7m:XnW1hWE1m0GftpBjZ4m3SZ7MvlJrU
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral16
- Target
  jre/bin/api-ms-win-core-processthreads-l1-1-0.dll
- Size 20KB
- SHA256 a1221836731c7e52c42d5809cc02b17c5ec964601631ec15a84201f423da4ac4
- MD5 5faf9a33bab1d39dd9f820d34339b3d4
- SHA1 50699041060d14576ed7bacbd44be9af80eb902a
- SHA512 73c25d1338df9aee5211fbb0e1b14e6bd853e31746c63bc46f44810622b09d52ee39b8e8a57c655da63d3d3d4025c2cba4d8673893d022417a2032ba3d935061
- SSDEEP 384:gWXk1JzNcKSIXW1hWEXRm0GftpBj1U6m3SddlmTod4V:gbcKSbxViZx8
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral17
- Target
  jre/bin/api-ms-win-core-processthreads-l1-1-1.dll
- Size 18KB
- SHA256 fe760614903e6d46a1be508dccb65cf6929d792a1db2c365fc937f2a8a240504
- MD5 d699333637db92d319661286df7cc39e
- SHA1 0bffb9ed366853e7019452644d26e8e8f236241b
- SHA512 6fa9ff0e45f803faf3eb9908e810a492f6f971cb96d58c06f408980ab40cba138b52d853aa0e3c68474053690dfafa1817f4b4c8fb728d613696b6c516fa0f51
- SSDEEP 384:dtUDfIeFrW1hWC5OZkum0GftpBjVzm3Sx56lgCoha6LDF:dteFuJoVijz1HB
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral18
- Target
  jre/bin/api-ms-win-core-profile-l1-1-0.dll
- Size 17KB
- SHA256 9e98b03a3ca1ebabdceb7ed9c0ceb4912bb68eb68f3e0df17f39c7a55fada31d
- MD5 7028cf6b6b609cb0e31abd1f618e42d0
- SHA1 e7e0b18a40a35bd8b0766ac72253de827432e148
- SHA512 d035ccfd0de316e64187c18e6e5b36e14f615f872c08740ec22ef2c12d592e37d78ab154202926a56ab01d669eb5870dff651280a882d6bf2a700c43dcd25ac2
- SSDEEP 192:D4VW1hWc2TVCEmCjdks/nGfe4pBjSfMesvMW5RKTt3E2sVWQ4iWJBJ9qnajuZDAu:DyW1hWTvm0GftpBjosv5m3SKlUK3dsl
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral19
- Target
  jre/bin/api-ms-win-core-rtlsupport-l1-1-0.dll
- Size 18KB
- SHA256 cdc4cfebf9cba85b0d3979befdb258c1f2cfcb79edd00da2dfbf389d080e4379
- MD5 2166fb99debbb1b0649c4685cf630a4a
- SHA1 24f37d46dfc0ef303ef04abf9956241af55d25c9
- SHA512 de27d06b1f306110b42d0ed2642a555862d0ade7e56e5f2908e399f140aa5f43904e08d690bcb0d2f4d11d799ec18fa682db048da57d99cd99891e45add86371
- SSDEEP 192:OGeVWW1hWixluZCCjdks/nGfe4pBjSYW5lW5RKTt3E2sVWQ4GWavOqnajd2si3n:OGeVWW1hWbFm0GftpBj/m3S6lMn
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral20
- Target
  jre/bin/api-ms-win-core-string-l1-1-0.dll
- Size 18KB
- SHA256 854db7d2085caacf83d6616761d8bdcbacb54a06c9a9b171b1c1a15e7dc10908
- MD5 b7cbc8d977a00a2574e110b01124ed40
- SHA1 637e4a9946691f76e6deb69bdc21c210921d6f07
- SHA512 b415ef4092fa62d39941bf529a2032bc8b591c54ed2050ea4730f198899f147539b2c0e97f3c4f14848c71066924c1848ae5f07779a1a47ab4c5e46f02be7258
- SSDEEP 384:eyMvxW1hWa3szm0GftpBjD0m3SojlD16huQf+:eyMvgZ8zViZ0sEG
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral21
- Target
  jre/bin/api-ms-win-core-synch-l1-1-0.dll
- Size 20KB
- SHA256 50a1542d16b42ecb3edc1edd0881744171ea52f7155e5269ad39234f0ea691de
- MD5 6961bf5622ffcd14c16fbfc1296950a4
- SHA1 5584c189216a17228cca6cd07037aaa9a8603241
- SHA512 a4d0c15acbff4e9140ae4264fa24bd4c65fb2d1052a0b37bf281498f3b641fef563c18115511829a23340c9440f547028d36015ba38cbd51ad0744d44d5ccd87
- SSDEEP 384:vdv3V0dfpkXc0vVaRW1hWW5OZkum0GftpBjwRm3SklD16hpv:vdv3VqpkXc0vVaA9oVi67v
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral22
- Target
  jre/bin/api-ms-win-core-synch-l1-2-0.dll
- Size 18KB
- SHA256 59c14541107f5f2b94bbf8686efee862d20114bcc9828d279de7bf664d721132
- MD5 47388f3966e732706054fe3d530ed0dc
- SHA1 a9aebbbb73b7b846b051325d7572f2398f5986ee
- SHA512 cce1fc5bcf0951b6a76d456249997b427735e874b650e5b50b3d278621bf99e39c4fc7fee081330f20762f797be1b1c048cb057967ec7699c9546657b3e248ee
- SSDEEP 192:ntZ3mW1hWig+49Cjdks/nGfe4pBjSYS6XXL6bW5RKTt3E2sVWQ4GWUFsqnajkZtu:ntZ3mW1hWA4wm0GftpBjbLZm3SElmTop
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral23
- Target
  jre/bin/api-ms-win-core-sysinfo-l1-1-0.dll
- Size 19KB
- SHA256 8310d855398f83cb5b9ca3adeb358da1354557aec5c82c8ef91a29f79a47f620
- MD5 df50047bbd2cf3a4b0cf0567514b464c
- SHA1 f20ae25484a1c1b43748a1f0c422f48f092ad2c1
- SHA512 5c3bfc2ccb2ee864b99f6709677474327e85889f4c962ea0a1ef9e1e876dc88b1d8e8e0f6c1422f634ff1c84a861c34e52ee07dac7fdde505b508bea80562b9f
- SSDEEP 192:6dKIMF8XW1hWixu7jCjdks/nGfe4pBjSYmL8lW5RKTt3E2sVWQ4GWfO+psqnajkt:iZXW1hWxam0GftpBjxEm3SK2lmTo6N
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral24
- Target
  jre/bin/api-ms-win-core-timezone-l1-1-0.dll
- Size 18KB
- SHA256 48eb5b52227b6fb5be70cb34009c8da68356b62f3e707db56af957338ba82720
- MD5 f62b66f451f2daa8410ad62d453fa0a2
- SHA1 4bf13db65943e708690d6256d7ddd421cc1cc72b
- SHA512 d64c2a72adf40bd451341552e7e6958779de3054b0cf676b876c3ba7b86147aecba051ac08adc0c3bfb2779109f87dca706c43de3ce36e05af0ddee02bbbf419
- SSDEEP 192:bW1hWipu7jCjdks/nGfe4pBjSYpGQjW5RKTt3E2sVWQ4GWqsegPBOqnajd2si3Ed:bW1hWJam0GftpBjEm3SPZlMELmA
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral25
- Target
  jre/bin/api-ms-win-core-util-l1-1-0.dll
- Size 18KB
- SHA256 a41bede183fa1c70318332d6bc54ef13817aeee6d52b3ab408f95fa532b809f1
- MD5 a1952875628359a0632be61ba4727684
- SHA1 1e1a5ab47e4c2b3c32c81690b94954b7612bb493
- SHA512 3f86180cc085dc8c9f6d3c72f5ccc0f5a0c9048343edaf62239eb4b038799845388898408ed7e8eac5d015a9bc42ff428f74585f64f5d3467dddb1303baf4f03
- SSDEEP 192:k5GW1hWiHu7jCjdks/nGfe4pBjSY4QUzzeW5RKTt3E2sVWQ4GWpmBPqnajkSXt7l:k5GW1hWDam0GftpBjqzzTm3ST9lJr/
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral26
- Target
  jre/bin/api-ms-win-crt-conio-l1-1-0.dll
- Size 19KB
- SHA256 d5960c7356e8ab97d0ad77738e18c80433da277671a6e89a943c7f7257ff3663
- MD5 6c88d0006cf852f2d8462dfa4e9ca8d1
- SHA1 49002b58cb0df2ee8d868dec335133cf225657df
- SHA512 d081843374a43d2e9b33904d4334d49383df04ee7143a8b49600841ece844eff4e8e36b4b5966737ac931ed0350f202270e043f7003bf2748c5418d5e21c2a27
- SSDEEP 384:J1W1hWA5OZkum0GftpBjNuCm3Sbsl4aRGWDk:JM7oViKCPpt
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral27
- Target
  jre/bin/api-ms-win-crt-convert-l1-1-0.dll
- Size 22KB
- SHA256 83678f181f46fe77f8afe08bfc48aebb0b4154ad45b2efe9bfadc907313f6087
- MD5 d53637eab49fe1fe1bd45d12f8e69c1f
- SHA1 c84e41fdcc4ca89a76ae683cb390a9b86500d3ca
- SHA512 94d43da0e2035220e38e4022c429a9c049d6a355a9cb4695ad4e0e01d6583530917f3b785ea6cd2592fdd7b280b9df95946243e395a60dc58ec0c94627832aeb
- SSDEEP 192:VpdkKBcyhW1hWBeI2WksSrCjdks/nGfe4pBjSYs//rvvW5RKTt3E2sVWQ4GWdziZ:/uyhW1hWk3szm0GftpBjsum3SiclPXOA
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral28
- Target
  jre/bin/api-ms-win-crt-environment-l1-1-0.dll
- Size 18KB
- SHA256 f7c6c7ea22edd2f8bd07aa5b33cbce862ef1dcdc2226eb130e0018e02ff91dc1
- MD5 c712515d052a385991d30b9c6afc767f
- SHA1 9a4818897251cacb7fe1c6fe1be3e854985186ad
- SHA512 b7d1e22a169c3869aa7c7c749925a031e8bdd94c2531c6ffe9dae3b3cd9a2ee1409ca26824c4e720be859de3d4b2af637dd60308c023b4774d47afe13284dcd2
- SSDEEP 192:sfW1hWiQcvHCjdks/nGfe4pBjSY6Na3sAW5RKTt3E2sVWQ4GWIjcyqnaj/6g6dqd:sfW1hWPQim0GftpBjzim3StltFpn
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral29
- Target
  jre/bin/api-ms-win-crt-filesystem-l1-1-0.dll
- Size 20KB
- SHA256 610332203d29ab218359e291401bf091bb1db1a6d7ed98ab9a7a9942384b8e27
- MD5 f0d507de92851a8c0404ac78c383c5cd
- SHA1 78fa03c89ea12ff93fa499c38673039cc2d55d40
- SHA512 a65c9129ee07864f568c651800f6366bca5313ba400814792b5cc9aa769c057f357b5055988c414e88a6cd87186b6746724a43848f96a389a13e347ef5064551
- SSDEEP 384:Mq6nWm5CZW1hW6am0GftpBjToIm3S7ltFps:R6nWm5CIcViCIk
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral30
- Target
  jre/desktop.jar
- Size 65.9MB
- SHA256 fb3c1d4038dbcdedd268ad654c466023e636027cf80d7f4f452a1cfac7bb11b8
- MD5 1fa23039a2e423db5c6f8f447cc618e2
- SHA1 0bbf945d631c62e7b2f129d22fa12e9e1600697c
- SHA512 f92b0e7f9e117555ce04da247aeec044394c37717f14dca2a55258944ea5902faa7b231b6f5d45aafa63db81dbcea10f77232d223e6bf1003baeec36fbd1d5a7
- SSDEEP 1572864:PQGvH/hXAPC/hUdbNMit0PsxhAdyLSSsc+sN4pMG7BXhGo3vgC:PhvZYJV0Psxhqc+sN4GaXhGo9
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Loads dropped DLL
- Modifies file permissions
  discovery
behavioral31
- Target
  jre/lib/jrt-fs.jar
- Size 106KB
- SHA256 55713bb4fcc81ce5b952320b8ab4c424e3041435b7643e8abe98a8750bef3348
- MD5 54eb57a9786300dc8707fcea594b89f4
- SHA1 70a3aee3a195cb9cf100fd14eff370ae314ad64d
- SHA512 69f60ee4f0d507c21b05da2affde970a1a72bf9b6de2bdf67a1bc378c2c2bc7892cf912f5efdbe51c72d41ccdeeceba45cfa684f48d1288fcffbf8fae255fc26
- SSDEEP 3072:7y6cONlUnYTPbfH6gqAmH7l0aQ7vY9mNnzahGBJaY7Tb:75dlUqWk87l4FRMGbLv
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

T1222

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Loads dropped DLL

Loads dropped DLL

Modifies file permissions

Modifies file permissions

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32