1fb9f3fb8ab37db43ec9512416a9025a76480e97f351cc7f99fbc547b30e4de2

Sharing

Copy URL Twitter E-mail

General

Target
sucvul.zip
Size 45.5MB
Sample260702-ddtd4sbt4z
SHA256 1fb9f3fb8ab37db43ec9512416a9025a76480e97f351cc7f99fbc547b30e4de2
MD5 2d2a5764fbed8757c07dfad0933129e8
SHA1 af92529b34669b54e1f73234406e5dfac7656f9b
SHA512 19122c3d07791959192469e0a3956f015e28fcbc07b21564c94d7fa07d3e8a45b920f4fd9fe1ff21122e78d91f665556fcbd299b71e6d9b73d92d0f030eac32e
SSDEEP 786432:Gs37NqrRLi6evL0eFxD22ZaF0Sie3ZajFY+YI8YwDIZZ0LOIL+Fk:GE7Nqrxi/0eLnZYieJam+YIlMnOI3
TLSH
T14CA733D5CAF36D01DE1FF13182744A0BF918C6F2A128E5EDF73456446BE9AC85B02CA9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  sucvul.zip
- Size 45.5MB
- SHA256 1fb9f3fb8ab37db43ec9512416a9025a76480e97f351cc7f99fbc547b30e4de2
- MD5 2d2a5764fbed8757c07dfad0933129e8
- SHA1 af92529b34669b54e1f73234406e5dfac7656f9b
- SHA512 19122c3d07791959192469e0a3956f015e28fcbc07b21564c94d7fa07d3e8a45b920f4fd9fe1ff21122e78d91f665556fcbd299b71e6d9b73d92d0f030eac32e
- SSDEEP 786432:Gs37NqrRLi6evL0eFxD22ZaF0Sie3ZajFY+YI8YwDIZZ0LOIL+Fk:GE7Nqrxi/0eLnZYieJam+YIlMnOI3
- TLSH
  T14CA733D5CAF36D01DE1FF13182744A0BF918C6F2A128E5EDF73456446BE9AC85B02CA9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  minecraft/options.txt
- Size 6KB
- SHA256 53ba6f782e1127fc28c1bb7308061c17e471ff7013ca26965a435591497518c2
- MD5 3f30dd53444842f581a4ed30010cc38a
- SHA1 d25af1ebd5d45163aedba87e0d7c08ef0c4621d7
- SHA512 35bb1a748931b42f000de97ca5dd8569a279e942571740c2189720a39cd126d015084a697f39d797ca852141ac74e65d82bc021d471ceb1754b8d188fa34a251
- SSDEEP 192:/NzweUE5THUP3YyEQbY3PyNbnUwbUQ4awDu/DLDhT3uDTADUGWFvDKDb6I2gTKxi:/NXP4Ay9P5zgTEeXq
- TLSH
  T1F2D1B5106A1EFCA8CED23A06C584E672271000B96DDABEDDF21D16EC174740D46EFB9D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

ransomware adware persistence spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3 behavioral4
- Target
  minecraft/resourcepacks/Classic Glint.zip
- Size 15KB
- SHA256 81740bdc0b7b61505c9ccd0b877db91dd587e9657db17771ae8655e699e4d2bd
- MD5 c0b300969ac7325509028690033421ec
- SHA1 f7d184ae5877ef407f16e0ad2e46895d0435797a
- SHA512 fc7c256c19e4da55c2a1e6fc53a9fd493a4c2105b689ddb1930ad2ebb71c860a2aa3620c361888f7bdb996c85958a95f3b4a5f9b76a66def3d3ac355a464bed3
- SSDEEP 384:QU+pjzkMAXEuhuHgMexs+Gs807PLBQavI+:QU+ZzXA/ZCZs80zKiI+
- TLSH
  T1CB62BF7EC8B62020D946E3FCC14E974F036ADB5AFD89DD4F2B26A24A3B589D18050B25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral5 behavioral6
- Target
  minecraft/resourcepacks/ItzRealMe PVP Edit.zip
- Size 3.9MB
- SHA256 030dceb809adf3c4fbca1ba9c251a6ea65e2081f121bd9ba96f93b3320e45f5e
- MD5 207f361e4251eb625db6af4f66f3e6f9
- SHA1 d626cf1eb0509e6c1a2c24c93e0ce2cb1e335cf3
- SHA512 1655c87d1ad2d4a98ffedc1406708c565518b2b72d778c6d5255c1e9dfa0509452c65c93092eec4cbf1be7bbc46925d2b9e2de15f2e1062ade8128d149bb318a
- SSDEEP 98304:IGupJiFghcxEjGg9ECs5vRqAKKy9c+7DMKvw8Sdhynsnc+luQPimjneVxm:I9pJHcyjgCIjTy9cSDMKvw8SdhynQc+1
- TLSH
  T196164C19D537AE54E98FAA7AA67212D3F8688772A858E1FF727DA4403FCF4C40043536
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  minecraft/resourcepacks/Nukur Default/assets/minecraft/.packsmc/conversion_id
- Size 32B
- SHA256 8dc08f7b674bb3d57ea540a315f05eba320c544a3e4f2a9f051f2ea7a1090729
- MD5 debb058bc315c6b9555530d0c9439031
- SHA1 176f9bc6f968152803f42dcec2af098491d4a260
- SHA512 6accede5d87efd23aa9477005ef48cbeb32d78178ad2de41e6f18a6a7b896dd001315ff6c466fad0e82809f2f5fbbf83465cfd44ba0a084ec171a5f1e2ea15b7
- MD5 SHA1 SHA512
Score

1^/10
behavioral10 behavioral9
- Target
  minecraft/resourcepacks/Nukur Default/assets/minecraft/atlases/items.json
- Size 139B
- SHA256 05198c388ded0526478fb7e527f6d533321eb51f28d944fe2078f468753c098e
- MD5 380779fa41e42c28baa99022a3533780
- SHA1 4be619e322e580d4db704d882563e89e4f599ae8
- SHA512 27a8429302165baaa0919f32cc7d72de58d5545a72da375e673c7d807938852b67a9475940b672536cd96096084543ddb960f5847dafb922f49b939669f50814
- TLSH
  T111C01215D09C0D2205D6712113C805854400C043CA482C3DF74C82AD4FE892D2AB862E
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral11 behavioral12
- Target
  minecraft/resourcepacks/Nukur Default/assets/minecraft/items/apple.json
- Size 87B
- SHA256 7d85b0783af4a7d98b5889cae62df0e5663fc3915fed40a7b701527bc7083499
- MD5 cb6d18547e9a67491bf7f76ccd12e9c2
- SHA1 133f373ef6f4859be2447d79408b507ad5c605c6
- SHA512 aabcabb85d767dcd08abbe438b84b82f293941bcfeeed5944651ac1b89a1472e94b4154bfe6925b596b4ce5da1b86fa87d884da61171dc815d7f0c4954f09473
- TLSH
  T152B01200C4361D07118FFC80226C0803E1108117C00404893B506174DF849AC131B328
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral13 behavioral14
- Target
  minecraft/resourcepacks/Nukur Default/assets/minecraft/items/baked_potato.json
- Size 94B
- SHA256 d20771c239a2dc3ce8b451c673bb2027c3deaca1b038f1d01105d8caa4655ff8
- MD5 6340986f42687976e555e8d777c8685d
- SHA1 ffc0c61394966a024f56f429f43098788bb1c76a
- SHA512 d18139488c2a61e71f6fc6f39b6e2058163741c83161c06eb5bc94c407a8200b017aa94aecacdce0a659085116ebc5433f5e706ffb0f5d566adae8786a266a10
- TLSH
  T176B01210D4361E0B11CFFC41326C0803F3208127C00804553B503174DF8447D631F174
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral15 behavioral16
- Target
  minecraft/resourcepacks/Nukur Default/assets/minecraft/items/beef.json
- Size 86B
- SHA256 a12fb9b62a08e8078e6e96c83cd2f7a18cec5e94619975cb387a445e7b297f4c
- MD5 db744971f24e3ab4b4728b1343b77ae8
- SHA1 e000c6745c53135f347757dc77ce4db0ec95764a
- SHA512 8e176ac61b32bd016fd30c0441e34ad7bdc2ff73567425eaad6bac0ac232ca8dfcee7e1830f54c7e1bfcaefe462b6949656d1846a45075e348afb70514406c2d
- TLSH
  T16BA01200C4361D07118FFC40226C0803E3108017C00404453B901134DF844AC131B164
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral17 behavioral18
- Target
  minecraft/resourcepacks/Nukur Default/assets/minecraft/items/beetroot.json
- Size 90B
- SHA256 0493460a5bbc6a6df96ab80cf1109babea12164d665738a59e474a694412ba6e
- MD5 7512ef70781c8ab16f2e86358bc134c8
- SHA1 3ecf3e3eeec1ad1636ca42fa87b073c999d3dc23
- SHA512 03f56d60170b0f44e970406865c5776de4d7df5fb30aaf187fe52b4f5674547a8304d33dcc55a7a3096843dfc582152ebf82f9824f9bfe6a0df3452a9a976c7b
- TLSH
  T18DB01200C4361D0721CFFC80226C0C03E3108417D00414553B501234DF844BC131A125
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral19 behavioral20
- Target
  minecraft/resourcepacks/Nukur Default/assets/minecraft/items/beetroot_soup.json
- Size 95B
- SHA256 5fa545af07053e8e5f461f59153d3b62a043263637bfac563742258bfa2fb6fe
- MD5 5ca591072842f2c280cc430eafa18cf2
- SHA1 27ecc2f4519586f2ecb61edbe590b0fa92dafe7a
- SHA512 e9ae4fded73be35344ecdf7fade7277cf2ae7bf88f65fb8429250bf9c8bd502700bed4b0b05b0154456e9e5befa651950fcfa60faeade2e9b8089447d8ab3034
- TLSH
  T174B01200C43A1E0711CFFC4022AC0C07F310C417C408146A3B601234DF844AC135A526
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral21 behavioral22
- Target
  minecraft/resourcepacks/Nukur Default/assets/minecraft/items/bread.json
- Size 87B
- SHA256 3055a2ef086e525b6f901cf1099b987c3c17ac52cd2f0c7ef2796d16d6f079cf
- MD5 1aad746e9b20294658e2d8eb9388cfb9
- SHA1 b15f8737638156fcf5afe6de25ba9e57a890c5e6
- SHA512 a49c4881118e060b04cb63b6a70c4a19bb0c15539cb6ecf7aeedad3e90cb6df3d7b299ab05c50c4760aeb2ed362cb9307cb67af04e43b556d0eb82033a6febc8
- TLSH
  T1F0B00214D47A5D07218FFC51226C5C03E7108517D40815557B515275DF8C5AD571A575
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral23 behavioral24
- Target
  minecraft/resourcepacks/Nukur Default/assets/minecraft/items/cake.json
- Size 86B
- SHA256 ef5ebdc8aee554cb2d9e808a4923e441aafebf0c43a45c29374cc35eac5725b8
- MD5 aeb24a098e448ebc75528e0e456d9c78
- SHA1 3b4ff794889957a735ff2b7cd5d50d0a8d9eb501
- SHA512 47227588f80b91e375a5ca28bb6a4d6979c539f38b30a7a7572a368e2351a93b7d6d208432e53bae6d530cc7deae3983e471149cb0880cba58d3f708f95d6ffe
- TLSH
  T1AFA00210D47A5D07119FFC51226C4C13E5108517D40819557B511175DF849BD571A265
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral25 behavioral26
- Target
  minecraft/resourcepacks/Nukur Default/assets/minecraft/items/carrot.json
- Size 88B
- SHA256 5011f1e3d6f3aebc066e2dd5f0662c3595afcb8123003ac3c9b2d2a60a07ac9f
- MD5 2adfaa88fcb530b194893fa5ac903469
- SHA1 e1923b431138ac29f0ea65e110230276b2c0e56b
- SHA512 03f25d40f36e132b3ae65b645f054f499f5f92843485f245a36cf83eabe887d73723ed30576f4acf431ed30a2c934f3d7361c63cf9846e893715308b721374ce
- TLSH
  T166B01200C4375D0B218FFC81226C0C13E1108117D00414493B511134EF844BD131A128
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral27 behavioral28
- Target
  minecraft/resourcepacks/Nukur Default/assets/minecraft/items/chicken.json
- Size 89B
- SHA256 51eabc3d96f5574380d0d002217da58623e4d42857587baa19a7779da9c831b6
- MD5 88384cfb28a11dc753b98ab39223e229
- SHA1 dcea15d959f2f212c1d0cbc2b39cbdc39418a7d1
- SHA512 4e4cd73fe281dc7b075dc80c44460b368ab26ce453dc55b5dbeb9fa3c348dd6eaf8b04eab693b01a168ebae3a22d84b67b43be4df496604c71e9889cae548607
- TLSH
  T111B01218C43A5E07228FFC40226C0C13E1208017D00408493BD01134DF8447C235A228
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral29 behavioral30
- Target
  minecraft/resourcepacks/Nukur Default/assets/minecraft/items/chorus_fruit.json
- Size 94B
- SHA256 4d40585d11104e4b5c250b722766fe5af4246a860fcb91ab0c46f00bf96093ca
- MD5 589516d87c7b4fb6ede4ff8bd93b0e54
- SHA1 4a44c639106b831b15dc2ab0c3ee7a8d3f4be6c6
- SHA512 c8811adcca482b54b1cfaa82fc3f50d2d9202d6ab527b640ff30d8c920bfcd5512a47d7b3ea87798cedb97fec04dbb9cf2f303ce5aca149d348943bbd204abc5
- TLSH
  T1D7B01210D4365D0731CFFC8023AC0C07E510C017D00404463B921134DF8446C132B324
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32