General
- Target windows-x86-1.5.0_22.tar.gz
- Size 7.2MB
- Sample260701-w1wf4ady7v
- SHA256 6c956ea7e8ef60b66e9ef6225ab439a6e9f1ddda1ef68dfe6a13c427a10aabc2
Malware Config
Targets
-
- Target bin/JdbcOdbc.dll
- Size 52KB
- SHA256 26301d66d7c6b49234a9e591672770752d62d64ae2f67335e9f7d25e0a42846e
Score3/10 -
- Target bin/NPJPI150_22.dll
- Size 73KB
- SHA256 7b3db46866bb968a944ffda3fe9a64affb9255b12302bbeffb00dc012a882ea1
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target bin/NPJava11.dll
- Size 68KB
- SHA256 b377ac2538d345945c5cd94ce8a7d940ad90c6856b685e7380b2f50fbb050d50
Score3/10 -
- Target bin/NPJava12.dll
- Size 68KB
- SHA256 a01f6aa4c7873998fdd60d55380f4d17ba08dcbfc43663447f993cc12450b09e
Score3/10 -
- Target bin/NPJava13.dll
- Size 68KB
- SHA256 be461b74e0b547a9c1ed0e13d28e268c0af8a5471d546c2bbf3f612a678bd7be
Score3/10 -
- Target bin/NPJava14.dll
- Size 68KB
- SHA256 26abc8b3d30644271e71ef56abbfbd7be58e484222871cf456ff70c3c1fd60ac
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target bin/NPJava32.dll
- Size 68KB
- SHA256 2ebba01a048c7bb75a7cbc5aa100b9693b8b420bf83259feeaaaa29e427a064c
Score3/10 -
- Target bin/NPOJI610.dll
- Size 68KB
- SHA256 a66ecf742e2a01fb598df78d98acb185afe01c10da7bf90cf32d96dfadad3490
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target bin/RegUtils.dll
- Size 148KB
- SHA256 e6bccaedfc6c00db769d5c39333ad7c1adfb8ff4f0b0c8b0db7e1d88967ffbdc
Score6/10-
Installs/modifies Browser Helper Object
BHOs are DLL modules which act as plugins for Internet Explorer.
-
- Target bin/awt.dll
- Size 1.3MB
- SHA256 f2a7465215f298ec9c604c59ee9cf720560e106b478c425056d13c40e65b1bb8
Score3/10 -
- Target bin/axbridge.dll
- Size 96KB
- SHA256 8df0ae2ce6524f71769693fcdc0643e7a4a25136d5c051d306eaf27fb5a860b7
Score3/10 -
- Target bin/client/jvm.dll
- Size 1.6MB
- SHA256 b6ed5d2218569e924930dd2a84536001ef34f89698b6c65140f05b1873266434
Score3/10 -
- Target bin/deploy.dll
- Size 68KB
- SHA256 c1d1b2daf1d3eb901be83c797298e206e6bce8b2f3cee3ee07de18d557e4e649
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target bin/dt_shmem.dll
- Size 32KB
- SHA256 86626d0b70026d592d5b45dd68b657213362aab3d0121f6dd66b06b367a88866
Score3/10 -
- Target bin/dt_socket.dll
- Size 28KB
- SHA256 467b62381a56745625a93de1839254ba26afae09c3d917e53ca63e31ef2b7c36
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target bin/fontmanager.dll
- Size 320KB
- SHA256 de5df116cfac6d2dd28c61e25924a18d9f2c201940c2831deb70c6a5bcd17461
Score3/10