b0f10243c24725c55277d78e69c8689561adcc590570b0986e4f30eb295809fb

Sharing

Copy URL Twitter E-mail

General

Target
injector.jar
Size 2.9MB
Sample260628-khkq4ags2w
SHA256 b0f10243c24725c55277d78e69c8689561adcc590570b0986e4f30eb295809fb
MD5 6afe9ad4cbae7d8a31db14e6179d1a9a
SHA1 4e866626a90698ca9b55b47fc736324d58e938d4
SHA512 8625526f220c4ff79febcda70d570c005ea2e248f796167882d80122c337e12bfd711dd413b13721797fe8d48098dbbb079557e06eca4bf89d76fa649f713cd8
SSDEEP 49152:o7+mZqS8IEN1PQv3yzu+aQwsQK30/JT7QrxqKcpGHRPufiJcJNGvYsZHe0iXc:oqkqSbEXQvqO9HRagKcsRvJcXGvDZuXc
TLSH
T1F7E5239B7BD3C865EA5B847117034683F9209116F8225B4F4B4C584C84F3ED2F9A7EAB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  injector.jar
- Size 2.9MB
- SHA256 b0f10243c24725c55277d78e69c8689561adcc590570b0986e4f30eb295809fb
- MD5 6afe9ad4cbae7d8a31db14e6179d1a9a
- SHA1 4e866626a90698ca9b55b47fc736324d58e938d4
- SHA512 8625526f220c4ff79febcda70d570c005ea2e248f796167882d80122c337e12bfd711dd413b13721797fe8d48098dbbb079557e06eca4bf89d76fa649f713cd8
- SSDEEP 49152:o7+mZqS8IEN1PQv3yzu+aQwsQK30/JT7QrxqKcpGHRPufiJcJNGvYsZHe0iXc:oqkqSbEXQvqO9HRagKcsRvJcXGvDZuXc
- TLSH
  T1F7E5239B7BD3C865EA5B847117034683F9209116F8225B4F4B4C584C84F3ED2F9A7EAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  tw/sartypants/vape/loader/A.class
- Size 816B
- SHA256 c660bdcba13958ddbc1f0d523eefa0561a6d8b2b2d3a96785017198ba0b500db
- MD5 8a86de0b46661349f41f7db08c382c8b
- SHA1 bbe63ab8dcbf4764a2804e0630c4ed051259ecca
- SHA512 9064b8ca345b9370765fb68d1eca475b8ca7bb71099974055d13d6180809aa9ef4472bda47d906f3450b67caf502fd1cb3e0f8a2db0238794c9ae1496144916d
- TLSH
  T11D016D46B0439463EAA4C53815A647CEB338D291581B5F3B461800A99D970C6F153F2F
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral3 behavioral4
- Target
  tw/sartypants/vape/loader/B.class
- Size 350B
- SHA256 33a301d1362b34b286cc542fbaa156d731e9569e20ecff8fbc2858b777d1650b
- MD5 4c231829dc0be088fadd36dd6d96a05f
- SHA1 f1719fffc5b69d8864efc948b77a0482dfcafd76
- SHA512 45fdcf2c102b5a9cd26f9a61c722083f263dfb17bb294bd4a700665c33de67ea33e33b943d7ae370df4fc85860ed5fa4be4d2b345ff88122b55ad97a233ad00f
- TLSH
  T1A3E0265328838653CE20983010C51789B120E152C9432F370D18007C89C30ADF463B29
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral5 behavioral6
- Target
  tw/sartypants/vape/loader/C.class
- Size 1KB
- SHA256 ebe50e3b20d10a063b1a518d4f3e886f0daa0216e666475725f1953c2bf07de4
- MD5 7113a3d1528cb47fa86ee61ad842acf1
- SHA1 34441de32f72955234f64c31a9b5ecfe6a748a92
- SHA512 aa19370712d3b0d1cee421f323dc6ec0a2ee02f56622c0efb5009afa0f9627757e71f7a0aaf97cb0963ab64ee68727fa19e9f6d5732190fdfe1567c228d430d9
- TLSH
  T145214423CF97E9300FF51CD3A2C602C48C6BA215AC0B95BE9780AD95DF6408B03B5A76
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral7 behavioral8
- Target
  tw/sartypants/vape/loader/D.class
- Size 2KB
- SHA256 97e22e6776497eacfc08b653e5c83128f2d3a610879800b739a4d4a557666845
- MD5 e59171f68ee3e777250a8c9ab214c059
- SHA1 3dc09eb59737f36a512d856c0fc3030074aa4a1b
- SHA512 9337a16151844fcefbdc3a0f84673f24114bd9c1528b3eda16d40103fce0f7cc58eded43e7729889072126fe9a7fec9a11c0a6a842f243dea4a663ca2e9d56d8
- TLSH
  T13451202FF504D257F411E3BE489002981121E822E9E3F6AB9FEAAD06B4E94919C916C8
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral10 behavioral9
- Target
  tw/sartypants/vape/loader/E.class
- Size 4KB
- SHA256 3934b5a75d2bf3979a40bcfc4f271808b46cb3870d9fb7ef72f988d68b667c5e
- MD5 c26a5e91bb5ed02254962978adfec9b0
- SHA1 34f007e204c7ce5e17d31634d39fe6b4dedbc930
- SHA512 0007c01efe82f986fdd71087b4b903b2b0257e14ec8634794a8388902a2e1a86bce408870504936b2f83fb340cb066ba693bc3b5088e9df45a07e4989d310a55
- SSDEEP 96:kIcC+HUM7v3EwMwJrvD6R6ee+AhcZl4l3Wbad:kbC+ZewA4emD3W+d
- TLSH
  T197A1635FF118564FF350F63C0D5303EC1128E532E2A3C2D7AFAA4D29A9DA583694A6D4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral11 behavioral12
- Target
  tw/sartypants/vape/loader/F.class
- Size 6KB
- SHA256 33989515d5f36a601dc7f5f7022533447e01f9704a00c8c3394d0f6956cf84ee
- MD5 eabb8dace2e654dde677cac409b022fe
- SHA1 ed1ab0fa62a166fabcf3d6b812bf9751b3790f2a
- SHA512 d7519e3f36cb811062f7ae3785a2d22c9417cdc5c2d281282bbe8cd10c33f0eeb8bf14ddec7dd5e2d091f86e681db473f6622118bd4e3294fe3782a470daee4b
- SSDEEP 96:tl9foJwIPgl9Iwfj2NLRwJYVr3jd4b65pqfvHmPZJzq11XS:tl9o5gl9Ioj2NGYVrT55psvHmPZBq11S
- TLSH
  T1A2D15227EA43D521DEA428F315D303D4883BE621AC0BC1BF9BC4AD85CBE605B53A1B35
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral13 behavioral14
- Target
  tw/sartypants/vape/loader/G.class
- Size 1KB
- SHA256 cfd219511531fc211f5e59fe74b810924d3fd6c585b2629467538e73638293f5
- MD5 7ec5d89cddcdeb936f3c200d8ca7b757
- SHA1 2414094475c13fbdb65ecd174fb5f4f3d68ce4e6
- SHA512 142a3708085348b22d4dfb8aadc55db1b9d0b21e8bc5ccddcb2e4e5dc3c579ac79aff053b5ede5116ac6b8d49a722324e62d2bc5ad4dca9eb3fb786f82208dea
- TLSH
  T1E621DF5FB501D70FF401537E18B00359A3A4B07BA1B3E7F34ADAAF43C8E91229946384
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral15 behavioral16
- Target
  tw/sartypants/vape/loader/H.class
- Size 2KB
- SHA256 db235c57f70e701cea968b9e78a069a8f55ac035e6b07a99bfdc323a9c749b59
- MD5 9339f5610d083986c13c31b394966dfd
- SHA1 f62a574c7345b738a564873d4ed283c0f59e1d52
- SHA512 821809b8ad2a72c809f1d2eb7b4fb1e3e3747a0944d8a9baf82af77519f1a8693986d9bed8ca06e36082930b88c9fa3ecec1cfca2910ad26262eecee19deb2cd
- TLSH
  T100412227EF83C634DEA529F390D6038C8937E5235D4B92BF6BC0ED81CE510431B92699
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral17 behavioral18
- Target
  tw/sartypants/vape/loader/I.class
- Size 1KB
- SHA256 6b7b4dddf69df6f93ca4af0e4fd712cd2b3eafd2212db0b90ac02a1f4b2cb1dd
- MD5 ae488703e963dd613f14c10644e3f3ba
- SHA1 9b820916928ed01edfac8254cbd4bc8a1645f101
- SHA512 55a5271136d246c6bc0be579e6703a169bea0a55a9626942b4ab394ac734c39d82622ab16e911a49cf5fe2a215f9a54d3e23027431ba78e698403f4e5110ce6a
- TLSH
  T12C3112ABF5828207F64061351E61678997A0E4124267FBA75F4B7C8D9CEF183E9137C8
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral19 behavioral20
- Target
  tw/sartypants/vape/loader/a.class
- Size 1KB
- SHA256 51e6f57f18ef561837a65dcc043a310c6d4db94c75dcf4fea6827f0674f379d0
- MD5 d1032a31ff9454d72d8f1bc520c6575f
- SHA1 5b4d3299030404fde9223d8e4888bfc4d2489aaa
- SHA512 5ebd846ee4d1e92b3dba21bf091c9c6868ca2cfc3ddeb3d2defffcba41479c4b11d6bb48ddb646ce2d23905cf1515bfa8fe4618d9e44e484828cbdb721348901
- TLSH
  T191112567F5430906D1B2FE3926578F005574CD785E7163D31F284F6ACFC3A4468081C6
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral21 behavioral22
- Target
  tw/sartypants/vape/loader/b.class
- Size 1KB
- SHA256 89d4135224604643480817b95acc3929be001695352b126c0df697b0f0f287f0
- MD5 6362ac07e70bd4bcb0c9feae838e67c5
- SHA1 0fb2d641a58d561af6d19a70d67f1210fe83e101
- SHA512 e5d5576bf8cd63019607fdd43d5424a3e71a19b8f5cbd700611b216c8d3b97dc5c10cb34da3ae2b689f6b20e963f56618944d80ac26e98e899094ea07f9c88b7
- TLSH
  T1DB412F1BB806DB07F56563794492874C8761E0338387ABE75F9B8D43C9C5BD2E991384
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral23 behavioral24
- Target
  tw/sartypants/vape/loader/c.class
- Size 291B
- SHA256 8b7fc8f906f6b38e85f7c637fd5ee020876f6d125cfb44050375425c6305b2be
- MD5 ad436fc0a2e04bf97ef6a7f9577f9bde
- SHA1 3c391bce49cc91b06c8636289ff38c35865a9157
- SHA512 e76708a43e36c6ffb69a7ba1582850826c49b10882f7830f35970c538cb4cf619fff125562dcc184652995c47af239f14086ab2baec428469e0cc3339c3806de
- TLSH
  T120D02B6B714A4653F210BDFCA4821B944105F4704622BA125A159F068D975A1FD713D1
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral25 behavioral26
- Target
  tw/sartypants/vape/loader/d.class
- Size 218B
- SHA256 8c3bd4dcf337790296cffdccac42a526e531c282656d9766a4950583acea911b
- MD5 74687abd7788fb3af734eb52fd68bfc5
- SHA1 3c86d3de4ed92fea88d8e480935f16ce0def3724
- SHA512 374bb93bb3f47c333e89177fd8ad54bececa74d32fb6334e1f414542f6f06bf34bb30898953f615fd120fe1de86458dfcfedbd7d507c5deef37970097d9e896b
- TLSH
  T120D02227204A0A47FF5009344E8223AEDA12E80048036F270F64008A4C8A0E1BF82B8A
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral27 behavioral28
- Target
  tw/sartypants/vape/loader/e.class
- Size 218B
- SHA256 7e1f5108b353c97574e15bc5e6d4704e0b03ec234f9065b390a7fd5f9c2f95d6
- MD5 965c28089177cd597b55cb5c56a15b32
- SHA1 6150a138803983d71615b1801b6d7347af0e070f
- SHA512 56aeaec054a6acd8ba4504c17688f95b2d3f158caf393e220121c83861a1fef47b6bbc24f08a59f82036b98e1702906456b9aa8c62de210c140e3729eb9a4d6d
- TLSH
  T146D0222F20CB4943EF50C9384584279CA102F8948C177B770E280A090C874F07F41AC8
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral29 behavioral30
- Target
  tw/sartypants/vape/loader/f.class
- Size 2KB
- SHA256 36d929af3c200d10a3e28b2792d81c513f7116c7d2ea6fbf32acb131040992e5
- MD5 23096202425baa01e0352ccbad01f735
- SHA1 17e5aa4e720b325f7e4e9e22b62dd11e6540d894
- SHA512 e5ac15bd9d937677c59e0e7810c6c01607083e436fcc57eb99c97cd010a201b2638cad1495b3e9edd2722c23dd31b88879bd5bcfafdef7aafb41b99f1b7ee1ac
- TLSH
  T1A151610B9417724FFA60E13C43D607C26120F932CD02AF6A0F558D0A54D35E3B2A3BA5
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32