Overview
overview
8Static
static
3AstraWare-v4.jar
windows10-2004-x64
1AstraWare-v4.jar
windows11-ltsc_2024-x64
1META-INF/j....2.jar
windows10-2004-x64
1META-INF/j....2.jar
windows11-ltsc_2024-x64
8a/aa.class
windows10-2004-x64
3a/aa.class
windows11-ltsc_2024-x64
3a/ab.class
windows10-2004-x64
3a/ab.class
windows11-ltsc_2024-x64
8a/ac.class
windows10-2004-x64
3a/ac.class
windows11-ltsc_2024-x64
a/ad.class
windows10-2004-x64
3a/ad.class
windows11-ltsc_2024-x64
3a/ae.class
windows10-2004-x64
3a/ae.class
windows11-ltsc_2024-x64
8a/af.class
windows10-2004-x64
3a/af.class
windows11-ltsc_2024-x64
3a/ag.class
windows10-2004-x64
3a/ag.class
windows11-ltsc_2024-x64
8a/ah.class
windows10-2004-x64
3a/ah.class
windows11-ltsc_2024-x64
3a/ai.class
windows10-2004-x64
3a/ai.class
windows11-ltsc_2024-x64
3a/aj.class
windows10-2004-x64
3a/aj.class
windows11-ltsc_2024-x64
8a/ak.class
windows10-2004-x64
3a/ak.class
windows11-ltsc_2024-x64
8a/al.class
windows10-2004-x64
3a/al.class
windows11-ltsc_2024-x64
3a/am.class
windows10-2004-x64
3a/am.class
windows11-ltsc_2024-x64
3a/an.class
windows10-2004-x64
3a/an.class
windows11-ltsc_2024-x64
3General
- Target AstraWare-v4.jar
- Size 10.8MB
- Sample260703-k3ltwsbs3l
- SHA256 b3fa6185c7bb20fcabd828a0847ec09527600b6186487c503616abeb3d45abc0
- MD5 caf36e328e5be0dbb15674d79984c80a
- SHA1 1de5b794e3d4757117bd03e10bb32d7fa60aa760
- SHA512 d8fba01c5a9d42a524544e9bc700f36570c32c752ac575d5c9d55d11c9af56f7c7b91c71ccd0b1b7a5f74f6f1eda1aff674535b944012e691dca0ec1c8c0c327
- SSDEEP 196608:YKoNMZalAJo6Yh7g/m15qh6276jhaWibAAaJ6o8UdZlGLxgVUuIfdityVA2WS:YnMAAlY++zt2OjibAAaJVQgmF
- TLSH T1D5B633B0FF880820EC57CB34C61509932F5F45D8FE4761B929E9D23F98979CA4F6A246
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
AstraWare-v4.jar
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
AstraWare-v4.jar
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral3
Sample
META-INF/jars/discord-rpc-1.6.2.jar
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
META-INF/jars/discord-rpc-1.6.2.jar
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral5
Sample
a/aa.class
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
a/aa.class
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral7
Sample
a/ab.class
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
a/ab.class
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral9
Sample
a/ac.class
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
a/ac.class
Resource
win11ltsc2024-20260630-en
Behavioral task
behavioral11
Sample
a/ad.class
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
a/ad.class
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral13
Sample
a/ae.class
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
a/ae.class
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral15
Sample
a/af.class
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
a/af.class
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral17
Sample
a/ag.class
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
a/ag.class
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral19
Sample
a/ah.class
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
a/ah.class
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral21
Sample
a/ai.class
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
a/ai.class
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral23
Sample
a/aj.class
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
a/aj.class
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral25
Sample
a/ak.class
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
a/ak.class
Resource
win11ltsc2024-20260630-en
Behavioral task
behavioral27
Sample
a/al.class
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
a/al.class
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral29
Sample
a/am.class
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
a/am.class
Resource
win11ltsc2024-20260630-en
Behavioral task
behavioral31
Sample
a/an.class
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
a/an.class
Resource
win11ltsc2024-20260629-en
Malware Config
Targets
-
- Target AstraWare-v4.jar
- Size 10.8MB
- SHA256 b3fa6185c7bb20fcabd828a0847ec09527600b6186487c503616abeb3d45abc0
- MD5 caf36e328e5be0dbb15674d79984c80a
- SHA1 1de5b794e3d4757117bd03e10bb32d7fa60aa760
- SHA512 d8fba01c5a9d42a524544e9bc700f36570c32c752ac575d5c9d55d11c9af56f7c7b91c71ccd0b1b7a5f74f6f1eda1aff674535b944012e691dca0ec1c8c0c327
- SSDEEP 196608:YKoNMZalAJo6Yh7g/m15qh6276jhaWibAAaJ6o8UdZlGLxgVUuIfdityVA2WS:YnMAAlY++zt2OjibAAaJVQgmF
- TLSH T1D5B633B0FF880820EC57CB34C61509932F5F45D8FE4761B929E9D23F98979CA4F6A246
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target META-INF/jars/discord-rpc-1.6.2.jar
- Size 2.0MB
- SHA256 4ae71906acc5aa3610d99a80ab05ef4c826575203b33f59b5cc1df9284504123
- MD5 5d90a25736333a404aeec88e98661952
- SHA1 096bf031a21c43794173781b04cef995f045925a
- SHA512 607fa86cbb88f6779422d83bba7c6ad48693185e7e423d01d28068b0018fb6cb0575711888aa559200e915051f100bc2e93b0d0630f91a93a57cb541f3c7b910
- SSDEEP 49152:GmsZwtuPzO8GyJMDsLE+xvkYlCea9PCB7aTuCU:Grmtkiy6KyrX9PCB7a6CU
- TLSH T17095334B7C95C01CE927C4BA125B8D435F4A0ABCFD09BCED16E88DA99141D8B07C67EE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target a/aa.class
- Size 1KB
- SHA256 40ccbfd32d0203500aa16b771417b23d3039c806f495387906d8045d96f1049d
- MD5 90b25710fc6678558a8b61636448d076
- SHA1 bb2c555721818a90e32da3efd0f84b26296797f3
- SHA512 19980a9a2af1e31ac6c682d0136cae75bdc1ba618be93a71b3790f2505e4e94fe48fc4db3447e4a24f06ae03ad9c5477419233d0377e4d54a418f2c31648cf70
- TLSH T1CA21331FFF041513E2E5E37CA8A082282368D43C4B2762619F7ADC2B1CD67104D127D8
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target a/ab.class
- Size 3KB
- SHA256 c084f9f0f3b65668a45606dce34942b8a366c5a7a73d608a93fcf0347a8d2ac5
- MD5 4019ad46e583e2236ac59c1b97265f28
- SHA1 edf81b1235bfa41da84374f22c25d5cc93c852e4
- SHA512 18ff2b931568a3ea5bfb1e96bf42622b417cfcc69ba4549ff468a7e284a8921c379818a75f6e71b7b3285a11c991a08b7d5fb42ba0d68f06cb3447d6ad602c26
- TLSH T1BC81E9D7620666A3F269E17E4C21C5159330D13BB98747C7BAB928F378D52C1BCC2271
- MD5 SHA1 SHA512 TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target a/ac.class
- Size 1KB
- SHA256 2a1c740b64ad832971c5a8a78790ab066580bc8a9fad1b881916d2d2f501edc1
- MD5 2986eb4865343fab98b64f4ae127c242
- SHA1 513fe8fe77cec44ec846d360f5ee0185b4ed61cc
- SHA512 f1872dd994399aee1bf9077de4baf756002fe7aeba7d34966867a7c389c81e3684e0d4a3ffbb17bdabaf981faf0633fcc6bf93007849d8bf1c0ec46ccb332565
- TLSH T1AE21E11BBB141613E190E37CAAA083192330E038071766555F699C2F2CD6B851E72BD4
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target a/ad.class
- Size 1KB
- SHA256 d48fbc922df76625838aabfd72a42ccafdd1eaa82576b830753f8366caf7af27
- MD5 55f511b4b9eaeeb434d036445341ab7d
- SHA1 912db291acdfe080e9f7235d1cc0e152c08edde2
- SHA512 ffe8c829c300701127996c1d2c2733cf834046ee7e6a498149367c66022d51e52050aa93647e16ac4e0c4375d733144672d85ce9135bd3bf93b1dc7a3153e2ef
- TLSH T1B2319EDB21F09E89D16AEF7D9442C3A45334D1172F03BB012646A17558CBB986F61794
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target a/ae.class
- Size 16KB
- SHA256 6496db7d8e1db746dc2756566cbbf91fa95e394e310f1337f14ca185e9e3dbb2
- MD5 8af7e358c11ff4dfe0d1cce8d8c6d809
- SHA1 780b9a141ba3463cbc305baf7387fb1ffb6ced38
- SHA512 d932515babe995ff9de06749babbff425e17824ab4edb4763e022a61a70e935359d6421e09662fefa54af31db8ade65fd13e545696cedfe316dec25c86837224
- SSDEEP 384:bT4p1hn+YwU2eoOhY7F0PMz5fs/DmlNdWfPEelN7:bUp1f2/OhgFikAPEev
- TLSH T1EF725C7FBF0E7877E12AC3AD14E2453712747625B4A7DAC0F6AE5C13F28A0D49842141
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target a/af.class
- Size 10KB
- SHA256 d41d8ea9e35c917ebe64e2f1665d9d7af4e7528d4c6423c5d5a052d1ba8c767c
- MD5 df69c4ca05d9e5c20ed0fffd777c8101
- SHA1 0a4dcc7c351b11055f81df16903a4aa55734d79c
- SHA512 ccb3bc0800419a22e070a3babf7ded2c8715d9e530dc4ce1e54e160fa243849e7b0a22565df5d6239ec78547b933d78df8ec58e5fceb36defbf02c15fc17beae
- SSDEEP 192:Fkq63AXvkySvQy/3ST08dPUxjsI3fwcl1IQOHO7dmvrqwSTgx1Vlos4e6Io/t2Wj:Fj637DPsPezcpSQdVaCPcHaax
- TLSH T157329607C64B6BB2F17FD2BD452889283230E236EE4B82C7B9F95C26B5D45D37A42415
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target a/ag.class
- Size 521B
- SHA256 06a6b9ae8527dead939e5354b3176407a94b8b0f15ba08448a510fe95b39c824
- MD5 6428706d6db2ab5ebbdd9ea70f1697d8
- SHA1 91a514a652751d43f101bcde4375f25ae75758a9
- SHA512 6418b9dc34dca6dfae95cf4394586d8223d05146191901a540a5e71697b129921aec8613cd33c07f423387bb2b46d809ded5bed898bb7f8dabeadb830cb1f8ae
- TLSH T1DEF0501361126E92D0FED73C7475C7219630D96A8AC7078B20785572EC626D5F941592
- MD5 SHA1 SHA512 TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target a/ah.class
- Size 524B
- SHA256 a52a6c3de5ee603c32bc3eb1e00555d9a4b05455b3f1ec126d22b0f86298e599
- MD5 cb2b5ba8e0659efdfccb470070ffdde0
- SHA1 6118e70ae3f59afec45ae2f5ac9d8ef603184634
- SHA512 df1549aa53959279566fe0586493ad7803e66c57311bd46a763a7f7fc73546b5994a2b0f2274517f15856253dd931a931248ae5c30bf7879034bd5d5c90bc979
- TLSH T10CF00E2310714873C7E18B76D4D6840836309115BFE3022A05D9C2737CDB2F0DA326F5
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target a/ai.class
- Size 2KB
- SHA256 7f40d4ff74a62991593bdb25dad84d00e9e7a9e060cfcad30dddfc213129c781
- MD5 22f9c4cc7b73c73a21083cec1c1f7a4a
- SHA1 b0ca6c430bf16e5a091447e2bb35dfb27aa4e6c9
- SHA512 b364f209ece19ddb62013b29fe9503748bb498591c98e5a95255b1d9e9e4e34e81315fd25f52a9af89a413e6e8982da50a1aac7b2245f5f83c1ab281fe552b05
- TLSH T1F941CB0480577FE9F23FE37A906DC241F0B1E236CB8E03CA39BC89127E811D6A5C6522
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target a/aj.class
- Size 7KB
- SHA256 24655612e252297c5355d1147ef43e3d0e7ee8fecfab3c903a7d80b74f14c7f6
- MD5 8927cee55be64826e807ec7a7e027824
- SHA1 f2057e891dcf128d627de780c45a6de66ad58e1c
- SHA512 79956ceef270792cc4f555760872dbc43efd85942f93aff9c2dcd355f1cabd6115dd7e7bee8b8130e7623683ddae3baa1c63ac25e73ccf01281b5fa2350ebaf6
- SSDEEP 96:UGFPPPPkPPPPOKtqm098R6YymUZ5xpewrY8lpBF+tBQYEQeMI2NQqcxR:TeE8mmsfvU8lp/+t6MpN3cH
- TLSH T1C5F1643796412F6F913FD13CE43B413023257CE03F5FE699BBA58D61658C927B68A081
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target a/ak.class
- Size 2KB
- SHA256 faa1a8afba885f393b474ac5f97c6d7bb83003d41061434e87cb0823338c1604
- MD5 502580ba83a241f2c762ad620f17fbb8
- SHA1 f93206b446e8f36a64a261017cd84c69eded2c06
- SHA512 6c7c72094fc9f3cc07badca4869107efa3d48e42b11b73b2074db45bdd90b32f851f69dc96a906bf5e0cc30c54b1392e3bf02b77fcee9d25073a217214139c84
- TLSH T1E641E30585477EB9E22FE37AD46AC145F1B0A23ACA9B03DE39BC8D017E911D364DB912
- MD5 SHA1 SHA512 TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target a/al.class
- Size 1KB
- SHA256 9ffdd8bbba92dc2088b1a7709308229d524dfe531c8df8acc43159a4512b8e67
- MD5 1f69f543ede58ad51b12db0586e90476
- SHA1 7b0461037d1edc3d3b4843e2cc023181ce57cfb4
- SHA512 c3b350a68830304f5000aa73d1d5d7bf8d731dcc0a56a78db14c5b998e6cbfaeaf625d50e8d78f3eafd57315d70bec910639ee141868278f62df71fc47b1be22
- TLSH T17611CC1BFE900173E048D23CE86143586734D06C012396A91F56D96B2DE73675F627E8
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target a/am.class
- Size 429B
- SHA256 8cb84eb0bb23862514001ceb6b13a8283d311d04500fb57d8f2c99d0fcba3866
- MD5 de6c6324451317fd2b05db6d418509d2
- SHA1 98f010abe8a2de166945f98688221887c5e81acf
- SHA512 498e0761ce902e78b5483c9f64eb018626f686da67d046a3eb454b79f9128a07f6aa1758495494e4c2556ab18af5429764ebaaf3ef636a8ad54afb9ff6fc944f
- TLSH T161E02B1A95119F53C1809779D4620708BA61E61DAB271F6D0CA582A3BC87699FE20BA0
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target a/an.class
- Size 4KB
- SHA256 ffa9caeb30253bf36450f05b2ce2d813eda03ab89d5122248b64ae0d72c50bba
- MD5 86e0deaf8edbf1d4e58010b0938b035d
- SHA1 f47e42f657758b38049d6c56af4f96f178705dcb
- SHA512 26de004b44f8d312b39fa48b9087da8ac65221c4c1a89fd7bf5c0e156a243f4a3e6dc6f59e754584b777ea85a8e63f727d11cc89b250dd27c960944725d20dfe
- SSDEEP 48:4XiXrFrffj6R5Oo0S58oKb0V3tLJBEwMUefisgPydDtvnl3Lvi8FJ4PY06lOONIO:7fa5OXM8wdLJHPefN9plTNJab6YG
- TLSH T12A91C55BF1082663F0D0F17D1821866C1164E83A50739DE68F9A1EB7AAF6AF09C613C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10