Overview

overview

8

Static

static

3

SmpMod.zip

windows10-2004-x64

1

SmpMod.zip

windows11-ltsc_2024-x64

8

manifest.json

windows10-2004-x64

3

manifest.json

windows11-ltsc_2024-x64

3

overrides/...erties

windows10-2004-x64

3

overrides/...erties

windows11-ltsc_2024-x64

3

overrides/...erties

windows10-2004-x64

3

overrides/...erties

windows11-ltsc_2024-x64

3

overrides/...u.json

windows10-2004-x64

3

overrides/...u.json

windows11-ltsc_2024-x64

3

overrides/...s.json

windows10-2004-x64

3

overrides/...s.json

windows11-ltsc_2024-x64

8

overrides/...ap.txt

windows10-2004-x64

1

overrides/...ap.txt

windows11-ltsc_2024-x64

8

overrides/icon.png

windows10-2004-x64

1

overrides/icon.png

windows11-ltsc_2024-x64

1

overrides/...od.jar

windows10-2004-x64

1

overrides/...od.jar

windows11-ltsc_2024-x64

1

overrides/options.txt

windows10-2004-x64

1

overrides/options.txt

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    SmpMod.zip
  • Size 531KB
  • Sample260701-a8g3sadv2s
  • SHA256 39cc13eda8d116c61cfcda9d6c480c7cea411df5bfe4ca90ac3b478ff9385678
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwarepersistenceransomwarespyware

Malware Config

Targets

    • Target
      SmpMod.zip
    • Size 531KB
    • SHA256 39cc13eda8d116c61cfcda9d6c480c7cea411df5bfe4ca90ac3b478ff9385678
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    adwarepersistenceransomwarespyware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2
    • Target
      manifest.json
    • Size 1KB
    • SHA256 d35963c8eb792b46a1335e7e5b30c712e360d57ff3878ddbb1204b3f256de527
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    behavioral3behavioral4
    • Target
      overrides/config/iris.properties
    • Size 226B
    • SHA256 a36780099062c141401771f6958662f6d373bb1d9c1bc576a17ef863f5d047e7
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    behavioral5behavioral6
    • Target
      overrides/config/lithium.properties
    • Size 1KB
    • SHA256 defbefad7b40e2a8902ff096aad10a2365c3bc1148a091998b3421eec8394b8a
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    behavioral7behavioral8
    • Target
      overrides/config/modmenu.json
    • Size 530B
    • SHA256 3a8d57d336378c3acd12096ab8db0752daa002fac2d4b7ae0fffadc50ad99b20
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    behavioral10behavioral9
    • Target
      overrides/config/sodium-options.json
    • Size 720B
    • SHA256 3a6c9c6ae08653658ac4aa80636a5277d66045e6597190559df907eabe7e5d93
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    adwarepersistenceransomwarespyware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral11behavioral12
    • Target
      overrides/config/xaerominimap.txt
    • Size 627B
    • SHA256 ee148cc9c3411abd1f2c6aac69797443c66195184cb70bb3fa9dde90bb488964
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    ransomwareadwarepersistencespyware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral13behavioral14
    • Target
      overrides/icon.png
    • Size 518KB
    • SHA256 87c3d66ba72e0e034c1a05f48044edc5badc25d55344dd32a2f38b82874add73
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral15behavioral16
    • Target
      overrides/mods/SmpMod.jar
    • Size 8KB
    • SHA256 7b755803f455348f29bc590e97dfa187273285c0a4fdc3a955d2c91536d84127
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral17behavioral18
    • Target
      overrides/options.txt
    • Size 3KB
    • SHA256 5b8ce80bd59ad779b94bc3e356205185bed3861ccd3c0db74b6e6424e28506b6
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    ransomware
    behavioral19behavioral20

MITRE ATT&CK Enterprise v16

Tasks