General
- Target apache-tomcat-10.1.55.exe
- Size 15.3MB
- Sample260623-appzaaht7j
- SHA256 739285a5936e41ee01d2d44e2db292d24a6c2a4ef4dd2eb5d4d15d40130e3ca8
Malware Config
Targets
-
- Target apache-tomcat-10.1.55.exe
- Size 15.3MB
- SHA256 739285a5936e41ee01d2d44e2db292d24a6c2a4ef4dd2eb5d4d15d40130e3ca8
Score4/10 -
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 996645d7f16a6294babb6da83478062aed7b72318d7a51b66e90ab5d3edc51a5
Score3/10 -
- Target $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 715a9b58de0995d1a08384c522ad9af210e2791aaf8e87a6c07bfe72ebfd2cb5
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target bin/$_24_
- Size 124KB
- SHA256 5357b174ce855b9404d8bbf2a406ed47b7a85b28437a523ae0f52cfa9bf4448a
Score3/10 -
- Target bin/$_25_
- Size 182KB
- SHA256 7bb251b0ec063ff233eed29582637446015c9424745a7a93cdf28dfc8176439f
Score3/10 -
- Target bin/bootstrap.jar
- Size 35KB
- SHA256 8e631690cff8bed6ed2af9129065fc2ce0564673dc4d95c9713ebae04f377af7
Score1/10 -
- Target bin/catalina.bat
- Size 15KB
- SHA256 5eb46b593825a6b1a229bd7da21b17ad90db86830b0ea0648ed00c30ad1a67f8
Score1/10 -
- Target bin/ciphers.bat
- Size 2KB
- SHA256 3475cdc1f0ba70ddd2322d0f7fbbe347ccd455991475dc30ee3743b008eef3c8
Score1/10 -
- Target bin/configtest.bat
- Size 1KB
- SHA256 ec4a051fda6df5f6675f767abe98acdd7fcb4fe59db76415db962e378ab0d1aa
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target bin/digest.bat
- Size 2KB
- SHA256 392398aee97df8c035b235f53e4971997a554b4c68f8b76f5baf7a5bcb8b254e
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target bin/makebase.bat
- Size 3KB
- SHA256 ca8ae1ec25e5bdb60478fa158014766dfa5d6c45f8dd02b58ea89e74e7bac5b9
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target bin/migrate.bat
- Size 2KB
- SHA256 43dbb6fef8d0257d41c3d236b2a1abf880513998b597411c2f108d7469c036bc
Score1/10 -
- Target bin/service.bat
- Size 8KB
- SHA256 58ad694d0b68e6b9670f90d57c1c129199d5a97c343a194020f4993507429e3a
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target bin/setclasspath.bat
- Size 3KB
- SHA256 612f21f66d794e05a8f1755d3e83c4aaee20ce4420a6f417d962ed6ab4901828
Score1/10 -
- Target bin/shutdown.bat
- Size 1KB
- SHA256 5ba2e804579d3c2da340e4431336a06db433b157cfa3effd0c2dd163b269f219
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target bin/startup.bat
- Size 1KB
- SHA256 32429ff3e1f18742cffe27b375762f76e00e228899f824e6c0ebc897fcaf8c2a
Score1/10