248f9bac0df42daeea7bafe81bccf7acc37222183d2af4faa2e6c17f244b0b33

General

Target
KryptonClient1.21.11.rar
Size 7.6MB
Sample260628-amq4kaev9v
SHA256 248f9bac0df42daeea7bafe81bccf7acc37222183d2af4faa2e6c17f244b0b33
MD5 cb53275d16478d52b67190b009f13366
SHA1 852eaee94e80b683b65645abc5af734ee87897c7
SHA512 45fb9e210976ff2be111ac429e8397125422ed9f3e54a0c38a9f09beed47c887f12449b525b57d0967dfc9bc4fc66d9389b242d4c4773b979eb09958bbae8fdc
SSDEEP 196608:U6SDeeIrXaxgY0sJ0mij2V6nFHsS5WCjYRkMZ0P3vXQ:zEITaxzHRi6eFHsOYCdo
TLSH
T16B86331EB8DB92F1234E1328BE02E5EC8F041592EE11455DD9953DEB8C7A333EE6416B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  KryptonClient1.21.11/Krypton Client 1.21.11_1.jar
- Size 5.3MB
- SHA256 d16e818aba349f019d012a19349a422d75ed50331582fb058a10aed77b559818
- MD5 336691ff7b0c025f20aea3682f4e9380
- SHA1 5ac3e69c7c70d7ac66cb9de42646e8f7c078f3e9
- SHA512 a245b196d504ddddc8421f12bc8606d798620596ef68e4165b35f5279498f22c7e4a1fecfc4ef75b91f2f5a5d67a2f4907d1524236d0dbe5e04b1b65c13cfa5e
- SSDEEP 98304:Fw00LQGWc8IQYrc16j5E0iGRoEi4bAt7i+Ot6UO6jdnxpZ5ds+dQ5:i0wQ/+QR16j5E0bWyedB6jFrZvm
- TLSH
  T1D1463314FEDBE67DD16311304C86842B294E32CCAD45AE2B23B41CAA4D35E856BD6FDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2
- Target
  KryptonClient1.21.11/fabric-api-0.141.4+1.21.11.jar
- Size 2.3MB
- SHA256 9286762874fd20d1d45e006d175fea8ff762da54e00946bbe952c4f61077159a
- MD5 5aeec6148c885849936a152bf4683c6d
- SHA1 13d3885dfec40313e2b3bf9ee639353272b9b48a
- SHA512 c092d48c6453bec3264f80f6a35bb334aba3112b5cd6c0e0b2676ce4d81e702cb1e522337f3a732348e757cc2226da3c601a314ae8766334f16af71a13bcc98d
- SSDEEP 49152:lue0exjmzizAm/FnUoDSYhuE7CbOYesYOs+x+j6ByIjSAee8:l7xjmzI/RUoDSyuWCAsYkbyASk8
- TLSH
  T13AB533B86F00955AC2262D3B56205EA1C078FC89291AEF7FEFB44CD439A76944F191FC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4