Overview
overview
8Static
static
3META-INF/j....2.jar
windows10-2004-x64
1META-INF/j....2.jar
windows11-ltsc_2024-x64
1META-INF/j....0.jar
windows10-2004-x64
7META-INF/j....0.jar
windows11-ltsc_2024-x64
7META-INF/j....0.jar
windows10-2004-x64
1META-INF/j....0.jar
windows11-ltsc_2024-x64
8META-INF/j....2.jar
windows10-2004-x64
1META-INF/j....2.jar
windows11-ltsc_2024-x64
1META-INF/j....0.jar
windows10-2004-x64
1META-INF/j....0.jar
windows11-ltsc_2024-x64
1General
- Target AstraWare-v4.jar
- Size 10.8MB
- Sample260703-k6k2rsbs7k
- SHA256 b3fa6185c7bb20fcabd828a0847ec09527600b6186487c503616abeb3d45abc0
- MD5 caf36e328e5be0dbb15674d79984c80a
- SHA1 1de5b794e3d4757117bd03e10bb32d7fa60aa760
- SHA512 d8fba01c5a9d42a524544e9bc700f36570c32c752ac575d5c9d55d11c9af56f7c7b91c71ccd0b1b7a5f74f6f1eda1aff674535b944012e691dca0ec1c8c0c327
- SSDEEP 196608:YKoNMZalAJo6Yh7g/m15qh6276jhaWibAAaJ6o8UdZlGLxgVUuIfdityVA2WS:YnMAAlY++zt2OjibAAaJVQgmF
- TLSH T1D5B633B0FF880820EC57CB34C61509932F5F45D8FE4761B929E9D23F98979CA4F6A246
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
META-INF/jars/discord-rpc-1.6.2.jar
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
META-INF/jars/discord-rpc-1.6.2.jar
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral3
Sample
META-INF/jars/jna-5.14.0.jar
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
META-INF/jars/jna-5.14.0.jar
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral5
Sample
META-INF/jars/jna-platform-5.14.0.jar
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
META-INF/jars/jna-platform-5.14.0.jar
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral7
Sample
META-INF/jars/reflections-0.10.2.jar
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
META-INF/jars/reflections-0.10.2.jar
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral9
Sample
META-INF/jars/sqlite-jdbc-3.45.1.0.jar
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
META-INF/jars/sqlite-jdbc-3.45.1.0.jar
Resource
win11ltsc2024-20260630-en
Malware Config
Targets
-
- Target META-INF/jars/discord-rpc-1.6.2.jar
- Size 2.0MB
- SHA256 4ae71906acc5aa3610d99a80ab05ef4c826575203b33f59b5cc1df9284504123
- MD5 5d90a25736333a404aeec88e98661952
- SHA1 096bf031a21c43794173781b04cef995f045925a
- SHA512 607fa86cbb88f6779422d83bba7c6ad48693185e7e423d01d28068b0018fb6cb0575711888aa559200e915051f100bc2e93b0d0630f91a93a57cb541f3c7b910
- SSDEEP 49152:GmsZwtuPzO8GyJMDsLE+xvkYlCea9PCB7aTuCU:Grmtkiy6KyrX9PCB7a6CU
- TLSH T17095334B7C95C01CE927C4BA125B8D435F4A0ABCFD09BCED16E88DA99141D8B07C67EE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target META-INF/jars/jna-5.14.0.jar
- Size 499KB
- SHA256 c37d2301659e73f8d891c20a2f8295a7a608ab4849b1e8075f7227bbf68a9aa4
- MD5 240bb73762341cdd096b95f40cdf9457
- SHA1 a51066f1eac9adb634bec8f2015bfb4127686164
- SHA512 4230093e0a9c5c39fee7bde356224180d05a800491b7fc0dd4be6771aae94b79fbdfc89115411454c1ce0be42a0ec2caea35d82f443d5d53a8d485ea26292356
- SSDEEP 12288:UvV/w62F6dwcYQw/UI0nFfnWD3Rt3lJ9DsNk+vgnH:Uv9M6Ocl068FfDsenH
- TLSH T1CCB41233D00EDC6EED2386FA54872785784F0AE8D41770FEB6E4890B1976B6F4388665
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
- Target META-INF/jars/jna-platform-5.14.0.jar
- Size 1.3MB
- SHA256 169fdcb79f1ff75a0217a0843857a6c361ac5b08c8f29765be1c8feadd0f2a24
- MD5 1e9df1d08e2eeeed7dffad069413ff2c
- SHA1 72c2472c998cc902506521384347262fed9969e2
- SHA512 4e303fd4ac4253f214254af8344a1fe5d6b47f2de4059490cbf3d84ace749f77a83a8bd2b04465b68b8b22fb68dbf61481d22cf0925edd5a0bcb9f263bb0b6a9
- SSDEEP 24576:zIVaNrlVIDF2zpCrLgecRHGYpFHR+o1qZoo2x5E1QQhU:zIiSF2zpypcDFHR+CrzE1Qz
- TLSH T1BD558D23AEDFCD24DF7759B3A2C2A241147F25A4AC0B907E12985D86CB7084B5391FF6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target META-INF/jars/reflections-0.10.2.jar
- Size 127KB
- SHA256 c528537b6bdd7ad6e2a679bab5b8f17508692263444c62489becb73e4c7aee4a
- MD5 873b68a1160fa7dbc1a5499f4763c559
- SHA1 3bc2281879b8ae736f5ff54e966b129268c8f786
- SHA512 8303a1ff6034e5d0bbd7b285c636f7f9230f2d2de3ee1510a4342e835c8694e250c739d53a515defbe044f68b9607c0cbfd17b361997baa278ed14c09b38f08c
- SSDEEP 3072:spUhoGTOdBv4VuNnkK1PoOr/e8T+OO64iTRx6dGSg:spU2N1GupkK3yZOO6BxpV
- TLSH T13DD3C0897C95A734F583D4BD88D38C235668E08C515C745E1AED8A4E8DFCE8A1E43BCE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target META-INF/jars/sqlite-jdbc-3.45.1.0.jar
- Size 2.3MB
- SHA256 60790599af1b2a61cd1da35de29805bd38874c9c978a684ce488e8bcfe85dfb8
- MD5 d608945a0807314893d439ce61ec8221
- SHA1 a65b339743a8975a6b5a36e514350f2c34239f55
- SHA512 8a3808bcd04342a055e6d27cbdefaadf526ca70a10506777a1c8bce1cf8281defb9f31cbb18e1e6404af4d03a7655aab6dad715dcbca81998f22830e8dadb5bb
- SSDEEP 49152:92zfXb/EB/LIKDmib6DLGEEgFbkhAhSYz9p46uYqtnUqKYmbYVXkHH:Af/EB/sKuGXgFkhMS+9panUqKX8V0HH
- TLSH T1E7B533949F1C0EA8F9C726B9C86308F61D7D1671F4C7123829A2576FFC92CDB0766286
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10