8c3dcbda9ed7737c2f074a1cc7a08f9efe6304aafc72e62135364def46f0363a

Sharing

Copy URL Twitter E-mail

General

Target
apache-tomcat-10.1.55-windows-x64.zip
Size 15.6MB
Sample260623-ap29lshy3t
SHA256 8c3dcbda9ed7737c2f074a1cc7a08f9efe6304aafc72e62135364def46f0363a
MD5 cc22c0c8b95396133df6067ae2da6d0e
SHA1 7bb805b86d8539ce2c258e2f2f31cea37dc5ae6d
SHA512 6f8923f0fdb3b5f8e54bd837c99ab148144ae6baebd34f00e33b2c8ddcde922f07513fbee86fc38621597b1775e0ca1b30062e011678c195580eafdb424110b3
SSDEEP 393216:XgVkGvi4w08NVXpxODLgziXMO8mKEZX6kyCrHRj2TZ:XgVL408NVZxggal8oZqKB2TZ
TLSH
T1ACF6336C88503A25FA4721F8335CAB19AAF6818FD2C34F79635D8A343976F41397B943
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  apache-tomcat-10.1.55/bin/bootstrap.jar
- Size 35KB
- SHA256 8e631690cff8bed6ed2af9129065fc2ce0564673dc4d95c9713ebae04f377af7
- MD5 400aa907e73be7644d21807a949ca20d
- SHA1 d4e028091a52614031f5a2f23046b89163843b5a
- SHA512 bf39385991cca96bc87584080baa01c68d120373d374aebd1b5ab8bf79b54263ffa2741aeaa11dbd63d16e62f7313cee48a4204e91f8d49f016713d0280ec569
- SSDEEP 768:e5meaUhCZrsgo8pyt1noR98r4juXRXu4irgWo:e51CKWpsWz8cjUSE
- TLSH
  T190F2D128E14CD068F67535F362938E63313F764EC5CB299C61DD5686BC748C89F426D4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  apache-tomcat-10.1.55/bin/catalina.bat
- Size 15KB
- SHA256 5eb46b593825a6b1a229bd7da21b17ad90db86830b0ea0648ed00c30ad1a67f8
- MD5 f1158c30e16a8eb92eaa24bdbfb9e0f9
- SHA1 23704ad0a90d3e8cb2747eaa211ca111123d6cd5
- SHA512 0d3d759db4cd5d4107f5b31a3e580a59d43d66bccdd1d11f06009884bfe4fb0c98d0093c61132262f1a1c62df0e6201d29c7441fd2f728461619c456f74c8b07
- SSDEEP 192:qntbHi5BTkP6Xy2I2glOpzcx1+6/dP2ts2hT8nW0nz4:qnt2TkyiZ7EpQx1+6/dP2ts2hTSW6z4
- TLSH
  T13B62737A5E559379ACB1C2615B1E0185F62F836A26888E05303F06C9337D2C6E2FE9E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  apache-tomcat-10.1.55/bin/catalina.sh
- Size 23KB
- SHA256 f1d9568d1811d1aecc79e58346003e40b0a1d621503a38ba59a07d74f1f010e6
- MD5 29d5c123edd760bb36a7e62c2f021001
- SHA1 4c4398b147a9b6c2fa27f8eeda23e04ee43b7540
- SHA512 008fac196a2b4d513927aa8166dbbf106e19de15f92bf4f48d9d670b759924b20d1442e87d60d49e2b1bc5de67d532732994a6ca6533abc8ee6db0b27e1838e5
- SSDEEP 384:eTBKp/hMi384G6w4PQ4vAax+qVQkAjgMIPLeKZwrenxvblwVBZL+tal5eZ6G1GEt:eCh984G6wsQ4vAaxWTIPLeKZDnJhw7zE
- TLSH
  T113B2A535B88003B85479C0659F4E51A9BA0F532F21902D2671BDF6643B782D2F2FF7A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6 behavioral7 behavioral8
- Target
  apache-tomcat-10.1.55/bin/ciphers.bat
- Size 2KB
- SHA256 3475cdc1f0ba70ddd2322d0f7fbbe347ccd455991475dc30ee3743b008eef3c8
- MD5 b12fe0848ca051e342b018138f70acf7
- SHA1 7a53757770780b571a8d65135fb15a3d65750728
- SHA512 34efb12123447b0bd54db97fb554e32e96ac9cd24d874403614303016c8fe8a22f804e987c3942d9b535ab14e8277794ede57ee29756228a99ad955959fc9ca6
- TLSH
  T12341457A9D4166F52DB0C1DA9F0E408BF32ED73B221E5264215B84C9523D0C693EEAF5
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  apache-tomcat-10.1.55/bin/ciphers.sh
- Size 1KB
- SHA256 a090e10d2c249b20f42f0bce2777273d2441e40037ac7ffe7a0107d94d4fd1e0
- MD5 e10ebb03f0ca6349128d8641841d1f42
- SHA1 cfbd43f3a3761e1e40e5670c0de72b3ba04443b5
- SHA512 4e408aba364adb990b9568bae9888068f97afa074d5cc037242dc0e4810e90101fa850941e3644824836cf03422860fa8ae4f1a940374b4fc51df86c4a51e62d
- TLSH
  T1004195557E4A3BB10298C4E65F0E95CFE317D27C39260360748D80C47329665A3EDAD0
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral11 behavioral12 behavioral13 behavioral14
- Target
  apache-tomcat-10.1.55/bin/commons-daemon.jar
- Size 26KB
- SHA256 ec18d7166f13a1b4ffebda6b0c62eb3ac21bf1264cee591e4ce3f62d4b3129d9
- MD5 b2ee1fab22fd1f4e539ef78c2f26ee43
- SHA1 6e5551a91a3ac8ce95f17ba76ca9908b5a3ebef8
- SHA512 a4f2ce0094e203f4b221f36b4f49bc3f356250db56ae9bcde1881ad28787cae8e90e6dd61c9150d46abf39b396a6b1fbd9da0ee062b8cebaa622c7b0d28e56c7
- SSDEEP 768:CaPpqwu8PSVYL4gvwBgFUQtUYeh0T2TtRWC:CaPru8KY/vweFNwhlRWC
- TLSH
  T17EC28E147AB0C076F2CB80F15AD2A8157539061A5A9AD09F46987F9786F0C133F63FDD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  apache-tomcat-10.1.55/bin/configtest.bat
- Size 1KB
- SHA256 ec4a051fda6df5f6675f767abe98acdd7fcb4fe59db76415db962e378ab0d1aa
- MD5 692212d59d9af4017e169766ffa029a3
- SHA1 0a80466aa8b6242ed36ba1d9a6e546d97b426c44
- SHA512 ad7ecac2fa992ed2084d3c6c57f6b8c00c31792d3f7aa9af2e998fffed383bbc2875b12b4cf7f803a5bdba6c19c4e7c47418c3b3dd785dd541237b83f061e4c2
- TLSH
  T1DA41307AAD4256F53CF0C1D9AF0E418BF32ED73B261E5225205B80C951391C6A3EEAF5
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  apache-tomcat-10.1.55/bin/configtest.sh
- Size 1KB
- SHA256 e91cb25289e002db08e5f135424c99251412b226f9c90f68cf85d714efd3265b
- MD5 6283241ad90060e9120ab70531861f53
- SHA1 d097588a21d32d9f21e3842126eaaa40581f0b6a
- SHA512 e0b855fe8be6b8126733f16f7ddc0b1d05df2eb5f5b4d0feaa090070e256d2e31785ece2954f0bf34ef85f6ec35d56556b32589c1a8792c19fa717b5645c3ea2
- TLSH
  T1D94161557D8A3BB206A8C4A25F0E85CFE31BE27C38661320B48E80C4736566463EDAE4
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral19 behavioral20 behavioral21 behavioral22
- Target
  apache-tomcat-10.1.55/bin/daemon.sh
- Size 8KB
- SHA256 287bcfb8b66193413026081964b6258ec09c130f6ad0fe4e5653bf204e51d3ca
- MD5 62c74ff81f19e97b3f5640420cb42d7a
- SHA1 e9cb30561ea1aeeb8a625dc9b67eeebf84af63b9
- SHA512 c365b71af0d539e60e647b83b245c110495c25a1508492c751e00fca75adbbe943e19445f8300775c0e8a0dc0af4777483bb774d2d8622a835766273690ff2a8
- SSDEEP 192:eT7HeT6vfwdIhe0QETehZlKVM1B9ZmY1txzDE/95pBbuHlOe:eTaWwdIk0QETeHEVYHDxzDa95nbuHlOe
- TLSH
  T1D00262359C505BB49074C0315F4FB1AEFC1B633F28909D0972ACA7942FAE691F0EE229
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24 behavioral25 behavioral26
- Target
  apache-tomcat-10.1.55/bin/digest.bat
- Size 2KB
- SHA256 392398aee97df8c035b235f53e4971997a554b4c68f8b76f5baf7a5bcb8b254e
- MD5 c9870bbd830b1ca7b25744d26ba5e6d0
- SHA1 28fb0e59b61ea3967516dded4fff2a2f160e3e77
- SHA512 368609a5bf8b081861894d42958cb0cfcaaa676f59690b8bfda4fb73c622549ee6804b5477829666882ef98b01cc94e46ead6790e7a7feaf7a4e432b2007eba6
- TLSH
  T14E41513A9E4156F52DB0C1EA9F0E408BF32ED23B221A5264315784C9023918693EE6B5
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral27 behavioral28
- Target
  apache-tomcat-10.1.55/bin/digest.sh
- Size 1KB
- SHA256 8dc28b0ec386c463cdf7e3acac98595599f851aff4febdf2419d8cea395f1943
- MD5 a5ad74fdba0062f4e00550084599d2a4
- SHA1 7d8f74ad37caeb59f33357391953575c9c32a193
- SHA512 c153a92a8e24cc6722968fd179013c6dcad9eec775eef6bb02f70a7e863b57ea745326f630807178fe763ade416fc9b4e09649872bb71c314bc42a6331eff791
- TLSH
  T1E94191557E8A3BB20AA8C4E25F0E95CFF317E23C3966136074C9C084332566563FDAE0
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral29 behavioral30 behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32