General

  • Target

    Apollyon v1.1.1 (Forge 1.19.2).jar

  • Size

    9.4MB

  • Sample

    240612-nnqq3sshlf

  • MD5

    0ae0c28816a843543a98bb3629a838b4

  • SHA1

    1e8261422c5d2d5c8e80f0303f1c15a4e208fc8e

  • SHA256

    64cd5aa8fe8e2ba8e41242d2a47b1a68ee62d75aabecce7a88ec53ce602da19f

  • SHA512

    3687635ccf6f0f0c066f476a25138c55bc3b3616db9968164d76d2c2e596e45194716fad37372ce50cc34dd0a51aca2b66f6d6c88b60853d82d2292bdb7ef061

  • SSDEEP

    196608:F+bRAwoS6RnRbyMD8Dc8em4cg89paykMs/1NSB8+EkdB3vHeXnBSV:FMmhquHuKMs/1Nv+EuvAnBSV

Malware Config

Targets

    • Target

      Apollyon v1.1.1 (Forge 1.19.2).jar

    • Size

      9.4MB

    • MD5

      0ae0c28816a843543a98bb3629a838b4

    • SHA1

      1e8261422c5d2d5c8e80f0303f1c15a4e208fc8e

    • SHA256

      64cd5aa8fe8e2ba8e41242d2a47b1a68ee62d75aabecce7a88ec53ce602da19f

    • SHA512

      3687635ccf6f0f0c066f476a25138c55bc3b3616db9968164d76d2c2e596e45194716fad37372ce50cc34dd0a51aca2b66f6d6c88b60853d82d2292bdb7ef061

    • SSDEEP

      196608:F+bRAwoS6RnRbyMD8Dc8em4cg89paykMs/1NSB8+EkdB3vHeXnBSV:FMmhquHuKMs/1Nv+EuvAnBSV

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies file permissions

    • Modifies system executable filetype association

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Registers COM server for autorun

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Checks system information in the registry

      System information is often read in order to detect sandboxing environments.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks