b64d7367d098c192a762a38a973575d4664c1d702058a864534c581b2110a6cd | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
b64d7367d098c192a762a38a973575d4664c1d702058a864534c581b2110a6cd
Size 8.3MB
Sample240606-pp14wafb28
SHA256 b64d7367d098c192a762a38a973575d4664c1d702058a864534c581b2110a6cd
MD5 e9fde8a7dfe890a0421fb2f6609e1277
SHA1 ebabe40fa5301b046d30c8fab495ed5e24c9da34
SHA512 aa9595835b8f74b197c2423801ac938e67199c84dea3e40f8395516137d30d5d969cc61f2bf67951a1a6f96c99b003e687048d68e934cd1bc7d25c9369469337
SSDEEP 196608:C7jQ7gfqUcUL8XfL+Jsl+HAg/Th5r8l+qrnEb3n:C7EUiUZ4lUbhVAjWn
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery linux

Malware Config

Targets

- Target
  macjihuo-2022/mac.sh
- Size 535B
- SHA256 f5146a9c3933273dcd1eb1d8badda6f1006a22654d199e94d14c7c90d4700a90
- MD5 481649c933fa22f31f9ed82977d1a620
- SHA1 2ea3adc2de2d6302f076ffd4aa81942905f5d3e9
- SHA512 4bd7448fab6cad71616a6732ce9041c26cdf052ea95a443ca6a54174e17fb380a65234fc05d9ec2491e74b05a08f0f9eeade5773b043982154a842c6bd077a60
- MD5 SHA1 SHA512
Score

3^/10
behavioral1 behavioral2 behavioral3 behavioral4
- Target
  macjihuo-2022/micool_macconfig/configfile/micool.jar
- Size 4.3MB
- SHA256 71d51fba62816403305688b4748cda89cd550e76a9930a4136e2d19a2ffd1fcc
- MD5 05e8dea69983f55dcfadfa9c0b10b13a
- SHA1 1f5cd5a2e8409dffaccb9f57830a3b5067c474b0
- SHA512 e6c563ebdc402a65e456b1452ba2371a1b17ec0e9b0f6c6d5b7376c912ba84c05186e7596673209b62e54b4bf6a876d7bc08fd76e7b081196f6fc26b9e3f81c7
- SSDEEP 98304:+g8DUHHy7/bF5cJGuI3EbEboViO84Lot0xTgsHTef2flQUVrP:jCUHHYp2nkEgboZ9tS2fPVr
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral5 behavioral6
- Target
  macjihuo-2022/micool_macconfig/configfile/micool/micool.jar
- Size 47KB
- SHA256 3acc4e9d91793f6909458a4761b75b6da45c8868e75dca33c9fec63659202995
- MD5 2fa1b1364515dce93eb67c423b570deb
- SHA1 2a723c2ef30be4a5c167c6639bf9ec0b9c7e7ca2
- SHA512 0b6cf7caf6d48419251d0aa1ccf280536eb20b1f108f874a9ce86943601c2317833031578fc869366e3bc40dedfabfd64527598ea63b879bc77f82a9a218766b
- SSDEEP 768:Oh7IDIGjwZyHIwcctMtI+xIfo1UC6cB+P9146lp3fbYHfkWvQdptYc4klY:KSIG0ZuIQMtI+xIrTcB034673fbgvYI
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral7 behavioral8
- Target
  macjihuo-2022/micool_macconfig/configfile/micool/plugins/dns.jar
- Size 4KB
- SHA256 d1150b1831b112b93d74a34a10ce6c11606e0d2255d532c29f91f1d92b40a552
- MD5 4f3c516c1704a5569725246d57dd1ae7
- SHA1 4e8693b5a7a3837cf7f6db0c4f1316f376d34721
- SHA512 f885fc751e9035944489578bb037f05521c6258c377c0c7bf8b8d10b799063e6e529c715ecebf9729724f0497f588803d7d463fbb70f5efbd73952624f60d08e
- SSDEEP 96:LSyBi1RBhx1yI/OEEKXejuu9lSx/xowSpTz7g8nJfTfTX:LSx1RBhx1y0OPhox/6fpTvgeRTfTX
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral10 behavioral9
- Target
  macjihuo-2022/micool_macconfig/configfile/micool/plugins/hideme.jar
- Size 7KB
- SHA256 fa14c735ab9fed3f3a5df0dc78a5d38ae0a146099ddc858197e9f528bd996c40
- MD5 cdab6a30b0949a741f13935f5483c303
- SHA1 729d00e4fa04ca49c00b5b6aa60706dfadd5644e
- SHA512 bf155c0b062fe9c7c237f9b0329a155387b7294fae7c7ed73e41e9528f119ccc513855329f6e91e62106b589c8b215d981ed11f2f89c7e13c06fbdcf7d6d1ee8
- SSDEEP 96:ohFTqRYuFhXQ5GeiCGkeFUgbH44yY8NVFubQLwNUmvHh18OiPKwChme:gFuRDiiCSbH4u8ZuvOMBGOiEme
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral11 behavioral12
- Target
  macjihuo-2022/micool_macconfig/configfile/micool/plugins/mymap-v1.0.1.jar
- Size 4KB
- SHA256 2a20c5f9a05820f522d9338c57aeac51232422af87ac299c3bb541e948549774
- MD5 7a0e7526ba7542c94fdc8f5bd0a4052c
- SHA1 37c069fdde8182879bf4958d703a19113bbae4ec
- SHA512 96bbb690f150322a8a86e88f013f749f55f67f41b4f5f19b78121d8d653b851c290c17e6e551b89e5ed37c38b1c408511cb67c5f15c627edf11a9ce61a480e89
- SSDEEP 96:Bn+DGJBqyu5t762MDaLFlFqz5e32NULTeDAjC4wK1Iuu:B+Mq35t7g+mAqULTLHwsIx
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral13 behavioral14
- Target
  macjihuo-2022/micool_macconfig/configfile/micool/plugins/mymap.jar
- Size 4KB
- SHA256 48f627919c46ec345119b05afbd18b2a443d47223533f21a64792302ffcd223d
- MD5 b5e49c56f85542bc19b14af11eb10d60
- SHA1 dc104acd2b3c83474f04b975f882a43017bbc2b2
- SHA512 30430bb87e1201c17f760f822c4c670c7b283e9cde56a2737da2ab1531f7634bc2f0034e3eef11f91bc1af52f8a80f598e9233a289566e0d95e1f5d48d979f97
- SSDEEP 96:ZnOG4zI+06qc5t762MDaLFlFDz5e32NULTeDAjC4wK1I0XzK:ZOEHBc5t7g+PAqULTLHwsI4K
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral15 behavioral16
- Target
  macjihuo-2022/micool_macconfig/configfile/micool/plugins/power.jar
- Size 9KB
- SHA256 7819e5b968ce5ea2e638e53d84089d35e89e9ea3088f18f8dbf6dd38d14ab25a
- MD5 d8711b73bc0507dbdc841b098af99787
- SHA1 26ee7577969265ff77a7fd786bcb707fe21a3d6b
- SHA512 dde478c503a5fbd17fd3cdac67d379abdb392d9edadc37feeafc3572f44044674af2f16e33b7c201fcb52e0d4eeb635fd53843b58700986aa380191aca6cc843
- SSDEEP 192:82u+Rd5aW2DJ1uPpz22NQUsLvA2EagRl3W8H:Du+loJ1EJ22dr1H
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral17 behavioral18
- Target
  macjihuo-2022/micool_macconfig/configfile/micool/plugins/url.jar
- Size 4KB
- SHA256 ce5a83aee31153cca30274ac94467b316edea8cb28acf72f52f5a72d455b1b43
- MD5 6b181e5b8255db4cd9beb1c6af5f420e
- SHA1 b1bebbee8d98218db5794f596001b8b7427ae0c7
- SHA512 26dabc145da4a987744ab86d600ab81482771fb8fc99933828104d4698f4dc407eb97281a36f01d5852fc2209d0092f10b7d23d62db8f7e456f8d2d0a108ce7a
- SSDEEP 96:KPP4+DT0nUeKLB3pWsWJMN4j4pbxYQcTxBWUw3/6ws3U:IPLTLRZWsN+6xATHO3iN3U
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral19 behavioral20
- Target
  macjihuo-2022/micool_macconfig/configfile/micool2017.jar
- Size 539KB
- SHA256 1818217b48e9b9222a60ce620f5f13e04172aaf7e2d79d700d20a83d733ebec0
- MD5 f5721587debebb34575e7a5c1267278c
- SHA1 e507fecf49457473a8f04323aa0538638ba158f5
- SHA512 a85a0c4c425c09d85b28eefdb4cfca10610a47bc882e81129857e40a92fdc905b44c0c9819cabd8e5fac61f4a5fff5b045f6946420cf76beb61e1fa84a8ac817
- SSDEEP 12288:xpO/iJYhkbPbOphhLfpIrXNF2grPnIMuVya71twqg6FETF:xE/2YmbPbWhMNk4PnIMuRSqg6FETF
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral21 behavioral22
- Target
  macjihuo-2022/micool_macconfig/configfile/micool2018.jar
- Size 1002KB
- SHA256 da958394d79615d0d0d31190ed0b63b3959901067db72dfba223c7e3a844c8bc
- MD5 a577fe434dcf668222505d75eb4a9b58
- SHA1 3323d5d0b82e716609808090d3dc7cb3198b8c4b
- SHA512 e47be505914db6c93a196edf10043e6563a557d926210a7dd4b92376c1fb8ac74a9838270d9e85786d80b11847781fa000952a124400187a2c5cc22d0ca62052
- SSDEEP 12288:YUsNQ8ZLJ20ksC7Qy0qNS+Kkp9cM1CkpClVAoDqnWicYAi4DaqXCKPTTZysORKb:YUb8ZLJmQfDEv6DtiWrtXuZkfYcb
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral23 behavioral24
- Target
  macjihuo-2022/micool_macconfig/configfile/micool2019.jar
- Size 2.3MB
- SHA256 e3055d5b636b39d5609b8cfa28da2d8955615985fad53a5c27baac51cadbc698
- MD5 b7650f3603805693d7633b64a755b416
- SHA1 de72619132579a7fde5a441f880955087d32f6ed
- SHA512 55c059b134c705460fc6ae4d5a1e87890dcda2a9dd8f587e6941f9003851fc703d04789d8ef58fd9e625fef86fc3a5cddebc2c25765a0444942da32f97d21ef0
- SSDEEP 49152:gxb6HEDaGHPVguuB1Gfgl5lXsfYCtfoPios0FNFDBrcLEmuYS:gxb6kDJH9dfglTXaltKioRfiEmu9
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral25 behavioral26
- Target
  macjihuo-2022/micool_macconfig/configfile/yz/active-agt-goland.jar
- Size 47KB
- SHA256 3acc4e9d91793f6909458a4761b75b6da45c8868e75dca33c9fec63659202995
- MD5 2fa1b1364515dce93eb67c423b570deb
- SHA1 2a723c2ef30be4a5c167c6639bf9ec0b9c7e7ca2
- SHA512 0b6cf7caf6d48419251d0aa1ccf280536eb20b1f108f874a9ce86943601c2317833031578fc869366e3bc40dedfabfd64527598ea63b879bc77f82a9a218766b
- SSDEEP 768:Oh7IDIGjwZyHIwcctMtI+xIfo1UC6cB+P9146lp3fbYHfkWvQdptYc4klY:KSIG0ZuIQMtI+xIrTcB034673fbgvYI
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral27 behavioral28
- Target
  macjihuo-2022/micool_macconfig/configfile/yz/active-agt-idea.jar
- Size 47KB
- SHA256 3acc4e9d91793f6909458a4761b75b6da45c8868e75dca33c9fec63659202995
- MD5 2fa1b1364515dce93eb67c423b570deb
- SHA1 2a723c2ef30be4a5c167c6639bf9ec0b9c7e7ca2
- SHA512 0b6cf7caf6d48419251d0aa1ccf280536eb20b1f108f874a9ce86943601c2317833031578fc869366e3bc40dedfabfd64527598ea63b879bc77f82a9a218766b
- SSDEEP 768:Oh7IDIGjwZyHIwcctMtI+xIfo1UC6cB+P9146lp3fbYHfkWvQdptYc4klY:KSIG0ZuIQMtI+xIrTcB034673fbgvYI
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral29 behavioral30
- Target
  macjihuo-2022/micool_macconfig/configfile/yz/active-agt-phpstorm.jar
- Size 47KB
- SHA256 3acc4e9d91793f6909458a4761b75b6da45c8868e75dca33c9fec63659202995
- MD5 2fa1b1364515dce93eb67c423b570deb
- SHA1 2a723c2ef30be4a5c167c6639bf9ec0b9c7e7ca2
- SHA512 0b6cf7caf6d48419251d0aa1ccf280536eb20b1f108f874a9ce86943601c2317833031578fc869366e3bc40dedfabfd64527598ea63b879bc77f82a9a218766b
- SSDEEP 768:Oh7IDIGjwZyHIwcctMtI+xIfo1UC6cB+P9146lp3fbYHfkWvQdptYc4klY:KSIG0ZuIQMtI+xIrTcB034673fbgvYI
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32