General

  • Target
    AstraWare-v4.jar
  • Size 10.8MB
  • Sample260703-k6k2rsbs7k
  • SHA256 b3fa6185c7bb20fcabd828a0847ec09527600b6186487c503616abeb3d45abc0
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      META-INF/jars/discord-rpc-1.6.2.jar
    • Size 2.0MB
    • SHA256 4ae71906acc5aa3610d99a80ab05ef4c826575203b33f59b5cc1df9284504123
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      META-INF/jars/jna-5.14.0.jar
    • Size 499KB
    • SHA256 c37d2301659e73f8d891c20a2f8295a7a608ab4849b1e8075f7227bbf68a9aa4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Loads dropped DLL

    • Target
      META-INF/jars/jna-platform-5.14.0.jar
    • Size 1.3MB
    • SHA256 169fdcb79f1ff75a0217a0843857a6c361ac5b08c8f29765be1c8feadd0f2a24
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      META-INF/jars/reflections-0.10.2.jar
    • Size 127KB
    • SHA256 c528537b6bdd7ad6e2a679bab5b8f17508692263444c62489becb73e4c7aee4a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      META-INF/jars/sqlite-jdbc-3.45.1.0.jar
    • Size 2.3MB
    • SHA256 60790599af1b2a61cd1da35de29805bd38874c9c978a684ce488e8bcfe85dfb8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10

MITRE ATT&CK Enterprise v16

Tasks