Overview

overview

7

Static

static

1

Akemi-Stealer.jar

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Akemi-Stealer.jar

  • Size

    11.5MB

  • Sample

    240925-mp91ns1apr

  • MD5

    0685bd8a3226e43102507072babd7c8c

  • SHA1

    25732dafbacefb99885e7576fa28137da356433e

  • SHA256

    28ba6cd4e8c4053023eed8ba837053feaac080e2a349a01d6a97f8631010f542

  • SHA512

    d786d735c4e7d4ca5b2c418ffae2614ef3b1c66d741f62d72cdaf142ea4dfa60ba05fc8c789043a8361e1db7e8c81b5b7523b3262ad4b38b30f122777bd193c8

  • SSDEEP

    196608:/Dfl4LDNwL4GTesx7kfUSLjnea56vClC5MZN0Njm8gRq5m51:bfl4vNwv/7jSv3kvqC5Mctt81

Score
7/10
discovery

Malware Config

Targets

    • Target

      Akemi-Stealer.jar

    • Size

      11.5MB

    • MD5

      0685bd8a3226e43102507072babd7c8c

    • SHA1

      25732dafbacefb99885e7576fa28137da356433e

    • SHA256

      28ba6cd4e8c4053023eed8ba837053feaac080e2a349a01d6a97f8631010f542

    • SHA512

      d786d735c4e7d4ca5b2c418ffae2614ef3b1c66d741f62d72cdaf142ea4dfa60ba05fc8c789043a8361e1db7e8c81b5b7523b3262ad4b38b30f122777bd193c8

    • SSDEEP

      196608:/Dfl4LDNwL4GTesx7kfUSLjnea56vClC5MZN0Njm8gRq5m51:bfl4vNwv/7jSv3kvqC5Mctt81

    Score
    7/10
    discovery

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Enumerates processes with tasklist

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks