General

  • Target

    focalpoint_v0.6.zip

  • Size

    16.3MB

  • Sample

    240603-ngqgqsea26

  • MD5

    6ac279e2ab27dba0f3effc61c95c5bc7

  • SHA1

    5a80e4e5a03d954a3973c169830319098cec8de5

  • SHA256

    c1f3da41a89315514fdf9c5cc026ac628baa53d3023e8e6ff362870c0be62a10

  • SHA512

    0510d23e509769bc0e3bea3d3ee761c2c0a694b437ec6ed2d377a88121ca7c83679c47a0040e67061d93e8a071b86879f61b598fc5ea9e336164dc400ca5d1fa

  • SSDEEP

    393216:D7GCEjwX3S9ruXR4QyG9omvF6/hy4UVllJ54YMXlsCh4ZNmW4en:DCCRS9ruStQvFT4eJuX1zh8mQ

Score
7/10

Malware Config

Targets

    • Target

      FocalPoint/ij.jar

    • Size

      1.8MB

    • MD5

      efe3ef356f9b781f680d20e1f091c1db

    • SHA1

      773bf6b1b9824303b6e12dbd6deb30dc84d69951

    • SHA256

      26a4d216fad1ffdd8a0aa489c1f67905e1f639d31ece54f784abfc4d9e5a7321

    • SHA512

      25c5c4be3c7c70d2f37972ff025212f1b28d41b07545e099cb6ebdde12f89c13bf7abc7f4af3e20d9f200440cdb00d91c71317cd22a76d497da561321ba76bc8

    • SSDEEP

      49152:R8J7rZQIGK5Zdmt8SScRqkaZIgKnT04ClYAC1vs2jbKUKIku:RoZQAZdMzSEvgKg5lYAGjbKUKIku

    Score
    7/10
    • Target

      FocalPoint/loci_tools.jar

    • Size

      15.4MB

    • MD5

      efdf9af6c0c82e4120628e121f920e00

    • SHA1

      f5946dcdb45519199ea569c1e8438c8473b01638

    • SHA256

      e28e1b85b7065feddfb58383ec6fc96875b360e529e04eefa957bcd7fe8e84f6

    • SHA512

      1002268e5b9811f1a8014fab2b3be848f540f3406620713431fffe3741ea9c7aa4f547ece21fcfd8c5715b0bb1493571ec74b7f585dab9fc5f64cf04c4de41f8

    • SSDEEP

      393216:OLhEI6Ex6yEXkqUQco3tXj26x135RZJJ2b20:KExEH8kLo31jHX3RH2bn

    Score
    7/10
    • Loads dropped DLL

    • Modifies file permissions

    • Target

      FocalPoint/run_focal_point.bat

    • Size

      117B

    • MD5

      9e876cec41c2f4164d71f481895c8163

    • SHA1

      bc479024fcbdf7da079adbf4ace3530cda2656e3

    • SHA256

      00143307eb279bb962f9db9c18bcfaa1ce17940abd7bc9d10e1f31e360feefd4

    • SHA512

      8286b2af907867a1daaa787e7e9599394cccef544e3587a09beb7418a24266d6f3e81ebfe4da05baf98d25de42ebd4d43d6a719fa68fdbe1aff8730b1c01ad31

    Score
    7/10
    • Loads dropped DLL

    • Modifies file permissions

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v15

Tasks