b982069ad5b90f5f89a1a302d951a7b2f6ddf87f9cc7a74c3bd4b32b836ade73

Sharing

Copy URL Twitter E-mail

General

Target
Mace.zip
Size 4.1MB
Sample260706-ed27pads6n
SHA256 b982069ad5b90f5f89a1a302d951a7b2f6ddf87f9cc7a74c3bd4b32b836ade73
MD5 75f373c17a1f335a906bc380387646b7
SHA1 01d0bb909027ffa26d2aac9bb40d2807ce9dff5e
SHA512 2b7bc50de171daaf467a3e354ce1ef45f74196716f312467a235c2359beef3ce12d81964fcf8c012e1322f2772fa6729541e140842fcd865f974c0581468c599
SSDEEP 98304:n2UwM/8MNb9FqgC2nx6cb0NWFgrUKLme01FYDar5kEdg9OObpcORC1o1HjZpaUUK:nL3BFvPxRbEWKrUKLme01FYDBkmRC1oZ
TLSH
T13B162905E57B6E54E54FAB3E15B21583E0298B329D18F1FFA275C0847ECF8C44963A3A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Mace.zip
- Size 4.1MB
- SHA256 b982069ad5b90f5f89a1a302d951a7b2f6ddf87f9cc7a74c3bd4b32b836ade73
- MD5 75f373c17a1f335a906bc380387646b7
- SHA1 01d0bb909027ffa26d2aac9bb40d2807ce9dff5e
- SHA512 2b7bc50de171daaf467a3e354ce1ef45f74196716f312467a235c2359beef3ce12d81964fcf8c012e1322f2772fa6729541e140842fcd865f974c0581468c599
- SSDEEP 98304:n2UwM/8MNb9FqgC2nx6cb0NWFgrUKLme01FYDar5kEdg9OObpcORC1o1HjZpaUUK:nL3BFvPxRbEWKrUKLme01FYDBkmRC1oZ
- TLSH
  T13B162905E57B6E54E54FAB3E15B21583E0298B329D18F1FFA275C0847ECF8C44963A3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2
- Target
  assets/minecraft/atlases/armor_trims.json
- Size 2KB
- SHA256 16382f41962abc62010bcf14da2ddf9971efd19356ef5acf4bb92c29f4dea2eb
- MD5 68e3025615d9133fe5a5b479c53a0be9
- SHA1 b2e64a676161bd61567dd59a6e0d93ead6d1a52d
- SHA512 9db52ac857b0e351e32bbee1a9ae5f74c581e2860ab64001e1e838585c19ab46bc59c97a62add35b4a2a82d00c869bf5e7c97127804f07bac5070fa3ec869b1b
- TLSH
  T117511294CBA24E8F04695ECD3AE95AE1452840AF4D077984B39F632CFF9C35A04F607E
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral3 behavioral4
- Target
  assets/minecraft/atlases/banner_patterns.json
- Size 253B
- SHA256 efa418adf7152b8dd27b57b74741a8d7447658af3097a942978553a3fd41e646
- MD5 f9ae27cc71ff0b62bd046d305b585703
- SHA1 d3cf81c9c351bc71485105c95a86d3ff266704a0
- SHA512 34baf35e18355e9700ff1d30ee53f6b5272b8da8f3bac7bc1ba85fcbf2d1cd4bbba4fe157109a206dbf104a6348bee67b1d120f42eb1454f9db850e58b0fcaf9
- TLSH
  T17DD0120698EC797300912038814901E2A0009043CF653C1DB74D01599FBDB29156871D
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral5 behavioral6
- Target
  assets/minecraft/atlases/beds.json
- Size 151B
- SHA256 6a13c27dd943400d1fa556f030e7da7f21bbb9152302e4e776e0164c08aa5ef7
- MD5 4ac7f6af86540a7268725469a69adc7e
- SHA1 8c55ed4880095ddbde206285e7b70c10922cfdfc
- SHA512 409dcda51859ba3f364992ea19f78efb2908532d8ec7772e78f2836b44ff755e7fc6c682c6960cdd25899d43087e3b1f75d3acd7fed512adb4f58b84490056ee
- TLSH
  T166C0121BD0DD2C2300D23021814C01C6EC00CC43EF4A3C2DF34E029C5F6AB2D2A9862E
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral7 behavioral8