General

  • Target
    AstraWare-v4.jar
  • Size 10.8MB
  • Sample260703-k3ltwsbs3l
  • SHA256 b3fa6185c7bb20fcabd828a0847ec09527600b6186487c503616abeb3d45abc0
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      AstraWare-v4.jar
    • Size 10.8MB
    • SHA256 b3fa6185c7bb20fcabd828a0847ec09527600b6186487c503616abeb3d45abc0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      META-INF/jars/discord-rpc-1.6.2.jar
    • Size 2.0MB
    • SHA256 4ae71906acc5aa3610d99a80ab05ef4c826575203b33f59b5cc1df9284504123
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      a/aa.class
    • Size 1KB
    • SHA256 40ccbfd32d0203500aa16b771417b23d3039c806f495387906d8045d96f1049d
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      a/ab.class
    • Size 3KB
    • SHA256 c084f9f0f3b65668a45606dce34942b8a366c5a7a73d608a93fcf0347a8d2ac5
    • MD5 SHA1 SHA512 TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      a/ac.class
    • Size 1KB
    • SHA256 2a1c740b64ad832971c5a8a78790ab066580bc8a9fad1b881916d2d2f501edc1
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      a/ad.class
    • Size 1KB
    • SHA256 d48fbc922df76625838aabfd72a42ccafdd1eaa82576b830753f8366caf7af27
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      a/ae.class
    • Size 16KB
    • SHA256 6496db7d8e1db746dc2756566cbbf91fa95e394e310f1337f14ca185e9e3dbb2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      a/af.class
    • Size 10KB
    • SHA256 d41d8ea9e35c917ebe64e2f1665d9d7af4e7528d4c6423c5d5a052d1ba8c767c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      a/ag.class
    • Size 521B
    • SHA256 06a6b9ae8527dead939e5354b3176407a94b8b0f15ba08448a510fe95b39c824
    • MD5 SHA1 SHA512 TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      a/ah.class
    • Size 524B
    • SHA256 a52a6c3de5ee603c32bc3eb1e00555d9a4b05455b3f1ec126d22b0f86298e599
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      a/ai.class
    • Size 2KB
    • SHA256 7f40d4ff74a62991593bdb25dad84d00e9e7a9e060cfcad30dddfc213129c781
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      a/aj.class
    • Size 7KB
    • SHA256 24655612e252297c5355d1147ef43e3d0e7ee8fecfab3c903a7d80b74f14c7f6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      a/ak.class
    • Size 2KB
    • SHA256 faa1a8afba885f393b474ac5f97c6d7bb83003d41061434e87cb0823338c1604
    • MD5 SHA1 SHA512 TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      a/al.class
    • Size 1KB
    • SHA256 9ffdd8bbba92dc2088b1a7709308229d524dfe531c8df8acc43159a4512b8e67
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      a/am.class
    • Size 429B
    • SHA256 8cb84eb0bb23862514001ceb6b13a8283d311d04500fb57d8f2c99d0fcba3866
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      a/an.class
    • Size 4KB
    • SHA256 ffa9caeb30253bf36450f05b2ce2d813eda03ab89d5122248b64ae0d72c50bba
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
3/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

adwarepersistenceransomwarespyware
Score
8/10

behavioral5

Score
3/10

behavioral6

Score
3/10

behavioral7

Score
3/10

behavioral8

adwarepersistenceransomwarespyware
Score
8/10

behavioral9

Score
3/10

behavioral10

Score
1/10

behavioral11

Score
3/10

behavioral12

Score
3/10

behavioral13

Score
3/10

behavioral14

adwarepersistenceransomwarespyware
Score
8/10

behavioral15

Score
3/10

behavioral16

Score
3/10

behavioral17

Score
3/10

behavioral18

adwarepersistenceransomwarespyware
Score
8/10

behavioral19

Score
3/10

behavioral20

Score
3/10

behavioral21

Score
3/10

behavioral22

Score
3/10

behavioral23

Score
3/10

behavioral24

adwarepersistenceransomwarespyware
Score
8/10

behavioral25

Score
3/10

behavioral26

adwarepersistenceransomwarespyware
Score
8/10

behavioral27

Score
3/10

behavioral28

Score
3/10

behavioral29

Score
3/10

behavioral30

Score
3/10

behavioral31

Score
3/10

behavioral32

Score
3/10