General

  • Target
    justice-launcher-setup.exe
  • Size 82.8MB
  • Sample260706-269hssav2l
  • SHA256 477dd97ff7b3b13c24d68f839b76393f9496877df9f001dc282eaa2f798053fd
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      justice-launcher-setup.exe
    • Size 82.8MB
    • SHA256 477dd97ff7b3b13c24d68f839b76393f9496877df9f001dc282eaa2f798053fd
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Checks whether UAC is enabled

    • Network Share Discovery

      Attempt to gather information on host network.

    • Target
      $PLUGINSDIR/System.dll
    • Size 12KB
    • SHA256 23d618a0293c78ce00f7c6e6dd8b8923621da7dd1f63a070163ef4c0ec3033d6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      $PLUGINSDIR/nsDialogs.dll
    • Size 9KB
    • SHA256 89a82c4849c21dfe765052681e1fad02d2d7b13c8b5075880c52423dca72a912
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      $PLUGINSDIR/nsExec.dll
    • Size 7KB
    • SHA256 2cd3a2d4053954db1196e2526545c36dfc138c6de9b81f6264632f3132843c77
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      Justice Launcher.exe
    • Size 1.7MB
    • SHA256 6481815492240c1c442d3b77d9608987f3fb79ee80bb726769a69b82c72bab1d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Checks whether UAC is enabled

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Network Share Discovery

      Attempt to gather information on host network.

    • Target
      JusticeLauncher.exe
    • Size 1.7MB
    • SHA256 6481815492240c1c442d3b77d9608987f3fb79ee80bb726769a69b82c72bab1d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Target
      bundled-mods/justice/JusticeV-1.21-1.21.1.jar
    • Size 1.6MB
    • SHA256 d53c047256e2262f81243d4798efebac7de756463cb7efde915e6c998e97b8cb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      bundled-mods/justice/JusticeV-1.21.11.jar
    • Size 1.6MB
    • SHA256 edd2ac38626e3459ee26c1568384d3d88cd789bc6d709486b0e56921f1cad71e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      bundled-mods/justice/JusticeV-1.21.2-1.21.4.jar
    • Size 1.6MB
    • SHA256 e954b84d5089accbc4f2cbe231f9156a278172f73d905c1388d1f0a44fcbdeb3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      bundled-mods/justice/JusticeV-1.21.6-1.21.8.jar
    • Size 1.6MB
    • SHA256 0dda26174e0861421e50eeb6b91a8be8f588710a73d9d4da5041ba58676f7a0f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      bundled-mods/justice/JusticeV-1.21.9-1.21.10.jar
    • Size 1.6MB
    • SHA256 3f77c5bcac9833abce0891590fd739337dd391f37635d04d20d402e2ac359b6e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      bundled-mods/justice/justice-1.21-1.21.1.jar
    • Size 1.6MB
    • SHA256 43184e3ace99cf65678625b5aa27528068eb3820d9fd3107fe6e820554a16fac
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      bundled-mods/justice/justice-1.21.11.jar
    • Size 1.6MB
    • SHA256 9970dc3c12b91b934076cd814b1815c717c025b583d6623ab7e152bce09f1b0f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      bundled-mods/justice/justice-1.21.2-1.21.4.jar
    • Size 1.6MB
    • SHA256 74a0d979c5634de35ca68809ef6a1c6f6797b1ecb9cd6208a3402cbda5c03250
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      bundled-mods/justice/justice-1.21.6-1.21.8.jar
    • Size 1.6MB
    • SHA256 16db797bb4a0707d1334e1a20a8bf9a946534a942c0b6195f102035ba499debe
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      bundled-mods/justice/justice-1.21.9-1.21.10.jar
    • Size 1.6MB
    • SHA256 f5574e586fb9cb878973aac456b0c587ed2680f2625a302dd9f383be999d7d49
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
3/10

behavioral1

defense_evasiondiscoverytrojan
Score
7/10

behavioral2

defense_evasiondiscoverytrojan
Score
7/10

behavioral3

discovery
Score
3/10

behavioral4

discovery
Score
3/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
3/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

defense_evasiondiscoverytrojan
Score
6/10

behavioral10

adwaredefense_evasiondiscoverypersistencespywaretrojan
Score
8/10

behavioral11

defense_evasiondiscoverytrojan
Score
6/10

behavioral12

defense_evasiondiscoverytrojan
Score
6/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

adwarepersistencespyware
Score
8/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

adwarepersistencespyware
Score
8/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

adwarepersistencespyware
Score
8/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

Score
1/10

behavioral30

adwarepersistencespyware
Score
8/10

behavioral31

Score
1/10

behavioral32

Score
1/10