44919217bfac691598b1dd8c927f26f05f6872de0f2216fcd07f324bbd0a3591

Sharing

Copy URL Twitter E-mail

General

Target
Tenacity-Launcher-main.zip
Size 232.9MB
Sample260711-rt6k9set5t
SHA256 44919217bfac691598b1dd8c927f26f05f6872de0f2216fcd07f324bbd0a3591
MD5 8573d137d14207ecc0d93835eb588b95
SHA1 d1fb862e0cc3888bc6663bb4976ed2b3d5dc5d73
SHA512 d1787d918ec2a31eb238febe6bed9cf9023badec302ea68929bc8f8b72aa4ba9a630f4ebab3947ba4fe13bff2b298ae97c85dae45e6a9826c62ce0e17b1a6a7f
SSDEEP 6291456:zDfUhLIgzKChAQFplZtsbmUDbZ6xuo8Zq/Fz9hGWOA0S:vfUfvhAAphuD+uo8M92hK
TLSH
T10CC833F4A0735EC6F51F75FAB4A60FF69290D071C212C87E7F808152A2987E64A9718F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery execution

Malware Config

Targets

- Target
  Start Windows.bat
- Size 1019B
- SHA256 c62dad4d5ba783441de8bb07766a12e2864e3400ce850914bf14977d9657030a
- MD5 253236c2bc335976bc052f5089acebb8
- SHA1 16951e9472aa72ba4ac7ec03f774e65833e80dcf
- SHA512 64aca22712a4e843c3fa5e4afb41341201be233acb6f555a002747d21a87734afff82972704e527caaf2d47db1c08955761818ce7e59ae9d3a9ac7c219924725
- TLSH
  T13C111F29CB0093F454B40D99F544D0B0E23D828A0764BFE82FE8235EFD4D39484EF2A2
- MD5 SHA1 SHA512 TLSH
Score

8^/10

execution
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
behavioral1
- Target
  Tenacity.jar
- Size 111.5MB
- SHA256 e0fb9ffdb578b64b68dccae32218c512a99742369a3b7b1bcaf88723e4cbbbc5
- MD5 184bd128cd6b56aa7f293a833f61f02b
- SHA1 4f18fd08a094005f61b6a2edb23cfddbe5a0e767
- SHA512 93ed8f4eb27f6117b14d42c8ec8f15bc096ba59f8a0b88c1de850432c4ea9e74fd2b8564b86c455978259704ebb9bfd33a9c0ab023c5822dab6e47da11c78dd4
- SSDEEP 3145728:yH45X+rZxSsl5t94IsLCkHAqWvvlJDlLXHAqG92+cCW:eCITSIsNWvDlL3A0+cCW
- TLSH
  T1BD483364E17B6D22E40F5177E16910F3B6248BB2D50EE0AF26F498316F8F8946E0973D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  files/Update-Tenacity.ps1
- Size 2KB
- SHA256 513454df369b437a0fedb6a47cf4bf75cdba4fedda5e498daa35f0cbffd85876
- MD5 dd84c74950a834bde129ce7661bbb49a
- SHA1 9984b6172ddcac0f2484cb2396425df56709dbaf
- SHA512 7bbb98115469e15e156f1788b8b2bdd2326fd6ec6bf6cf2923d88d12800ea34a58fd93e27db58c1c458d72752b5b9780a265f9bf6917e2f7c91ab44f4af9d70d
- TLSH
  T110510011D322D72109A51342E8584154E609C20E875DEFED71FDA34DFFAA23E45DE3BA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3
- Target
  files/jre/Welcome.html
- Size 955B
- SHA256 db34008b34b4bc3177436e71bd01557d45d52e710699758ab227e5fec7ffadb8
- MD5 810ef9be9bdf09983d41e244a6179a20
- SHA1 d98ae54f03dac87419abc19b97e315830c2da55f
- SHA512 3da4de8d7a7d037aa64f9a771c9aeb743d43839294acb773cecb2ba9b0c869cf3d7f3e3bc41d803238f297647e85abd43f596f1c2df46579ec0a34263744e406
- TLSH
  T19711D0EFE9F49B12B76015D321E466E47BA941F55C63C85A3A1182029040E36930FBBD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral4
- Target
  files/jre/bin/JAWTAccessBridge-64.dll
- Size 15KB
- SHA256 a69c5d4c18bd69dc5ed545f6d2f5afa85d9e03318c4f79d585d0a7d76d7e505b
- MD5 c17e41fa4e27bdd3e9846f8872ccde6e
- SHA1 48dc95558a9c1c3e454688117a8633711e3edf66
- SHA512 3d06d1ece4d812cc8ec199cf1c82ef3d676f5a918a793744b145d45c0173b94f1dbfba35bc680f79ab247923072f821ccc60cec50aad27327a041f7889e94d88
- SSDEEP 192:lrD+qusvKUuBI3X29MPKgSunUMbL1tJx+wVIf4uRfH0JOqsmVgz28WhBquHnW0p:lrTzvKp4G4KgSuPj+j8JN77hh3nW0p
- TLSH
  T1A6726B9B4B385053F99B8E31D2EAD31A9C3077E06BA9449F04A563514FC3BE12B1C32D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  files/jre/bin/JavaAccessBridge-64.dll
- Size 139KB
- SHA256 bb9c1d852d476c7eac2106e603a4c3c2f0f3dd6caa6ea2f8feee079e05c97402
- MD5 b5433c6f30aef4f72418f47e44444eb5
- SHA1 97b858d4ff7c8f841a73123bdf6a5fcd36df0eb6
- SHA512 ce5bc0d499c9eb01df4513532355b9324a2a41c10f7bf1ee4528531451a2dc21e6692205764327e6e87524f0aded751f4289fcd8f2497ed22ee6ebef34d2bb5a
- SSDEEP 3072:nh69w7BupQRXHcmWih+p6DOWXbwsKkpQHj/oNw7u1LDZvmmwY3JyuDzlcJxjj8ud:ncMApQRXHFW35H40X
- TLSH
  T18DE308237AD57276F37B5239CC91E120E66071186337476B8DAED33B13A3042B968E5B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  files/jre/bin/WindowsAccessBridge-64.dll
- Size 108KB
- SHA256 e7270c30d0ed628e4b9f67d898c936752284e787f7b775cdb7356d58a2fcb5a5
- MD5 14b5e9a865b27cec3ac221f3f40aa288
- SHA1 309134efebf2f0f12e0a01c56ccaac8bf62dbd39
- SHA512 4c96b460bdfc4df76aeb170d03fa8f6bbe617621bbf0bd8c3c42e8aa9238352e937b9af1bc6901ce1e8b3e186a23b4f7df3fb8a2a5e13234e7df5df56efd59cb
- SSDEEP 3072:LlNYiJvPyEcTNSHM3c7wJ60+c4NyPEKYIM4:LlJxy9TwM3c70kEEf4
- TLSH
  T190B34B1373A420F7D2664279CCE78A04ABB535AD1732434F89BA511B9F933829F2D772
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  files/jre/bin/api-ms-win-core-console-l1-1-0.dll
- Size 18KB
- SHA256 49ac9f317d0adfc3761d6ff0d32844be70cc78e2af18319c9a2e2ec2a44d672e
- MD5 3463d82d90601b441cf024c92abe4acc
- SHA1 eac8fdafccbc1beb17386552922770bfe12ec1eb
- SHA512 ff4fe61c7dc5f8eb7012cc4867d7212cbf965ec786dfdfa8c74ecad8c582c4ac1107aa2876e5f11066908fbd07c1b353dc67060c28199a7e21d57adbdddac977
- SSDEEP 192:5wkETRQWfhWpBxQmLuDBks/nGfe4pBjSHM4+O38WebtuVaVWQ4CWaeOBqnaj87XD:BWfhW1Q7q0GftpBjj4+1ZFtl9V+H
- TLSH
  T1568239928EBCC683ED97AD7023E8E9837C3DABC35910615525A9F1D92CC33D1EB1891D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  files/jre/bin/api-ms-win-core-datetime-l1-1-0.dll
- Size 18KB
- SHA256 0f0cec83da06f06e9c42ffded72fa69c51efed881def2b4b7b88274bc1bf3d40
- MD5 ac3c4cafa028297da5037781f1156220
- SHA1 937c2b11c7fe4effc16e67af716563aee2419a0f
- SHA512 a2d1135f497e3831f14369978ae6a5ff74106d9d4ea0407548b6c336a1082bddd196424b292c799ce60270182c13e148971039cf29241e76203b069ebf7bb72b
- SSDEEP 192:fWfhWphuivT16uDBks/nGfe4pBjSHcKaRrJL2TI8WebtuVaVWQ4CWiRqnajjpxfk:fWfhWDTvT1Nq0GftpBjpanZ/RlBPin
- TLSH
  T1D0821AC1CBBC9483ED97AD7023A4E9837C3DABC71D10546A15AAF5E92C833D1EB1492D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  files/jre/bin/api-ms-win-core-debug-l1-1-0.dll
- Size 18KB
- SHA256 a20dc11ab10769b38cafb701c2d08810c8aa61350f0b33ae7838ff5c26edf956
- MD5 8c0531639f58f79b5b67b52edebb01bd
- SHA1 866f3ca8819440e0ba67eb935e688509f86ce1e3
- SHA512 d6ddcb814d7f507df03bd5fb378eae3bf30f31d0cbb41136382469297033965763dc20e68dc50108eeb5fb5996d167cf21b29dbdc0ea163521607e1cc75f7d9a
- SSDEEP 192:1WfhWweivT16uDBks/nGfe4pBjS72Ek7KHwDoG8WebtuVaVWQ4+WoRmqnajiPNQJ:1WfhWqvT1Nq0GftpBjGmKQDcZZ8lgeL1
- TLSH
  T1AE8219828ABCC483ED975E7063A4E9837C3DEBC71D20506605A9F5E92DC33D1EB1496D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  files/jre/bin/api-ms-win-core-errorhandling-l1-1-0.dll
- Size 18KB
- SHA256 79cb8a8781feb448fe051e90ccaf3d6ecdfac12c1ad4bba2730aa1f0a229c31e
- MD5 2a3c5cbe313f4105dce8a79f533e5959
- SHA1 26e6768280c83217ccbe36f3a405381defec12b9
- SHA512 e24ba69254b445a62add1d58269ee99841c36049f639671a311bfc0f60d965e6a8d79a67375eb0d3ee3be8cf998f182ff03291f0709ae2155bbee924708dd8c2
- SSDEEP 384:VvPWfhWBR4Zq0GftpBjITKpgZ3pWl3u7gFO:VvUG47iV2Bz
- TLSH
  T149822A928ABCC183ED97AD702394E9837C3DDBC75D1051A615A8F5ED28C33D1EB18A2D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  files/jre/bin/api-ms-win-core-file-l1-1-0.dll
- Size 21KB
- SHA256 38e535e9a79cd72e3f5e3c0ec9c97a18e86d480a504ea6c85854a6f70b302c3a
- MD5 4215700161720c767e725b1f7fc358ab
- SHA1 6e31fa39775c1c6c60fe8869761c31148b0a8019
- SHA512 8c93f4021544ffafa37665efcbfa2c4d23742573e695766c637c9449a39af5ea0de114c821a5c50b886ed1ab0f0a2be0fdda164884d73f7488402cfa2137e5b6
- SSDEEP 384:HBPvVXWWfhWkQ7q0GftpBjNhZjl78oS/i:hPvVX3Oi9Laa
- TLSH
  T144A20983D9B8E587FC8B9D302295D983BC3993C2082055D61AE8E2ED3CD33C6E798558
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  files/jre/bin/api-ms-win-core-file-l1-2-0.dll
- Size 18KB
- SHA256 8355bf70788c00fb1a17bc4160bcdc6930fa219b85473e08138efc10136d90eb
- MD5 285e3257c5a12d3384cd3f5a3ae941b2
- SHA1 c05f6a72b73bc7ec8409ed42ccd947f501da0166
- SHA512 f1ee0689b02e6a6e95940c1b3c2cc6902f3e04db44f4d767a1e68a890b7b3733b28c1d86f1f361f0db8b1ee955f5f5bca86b758b8f2e93d94b5bc4d469187df5
- SSDEEP 192:egWfhWwhivT16uDBks/nGfe4pBjS7o9sf8WebtuVaVWQ4+WTnUqnajiPNQLyhB:BWfhWlvT1Nq0GftpBjs0Z1lgeLyB
- TLSH
  T132821982CA7C9483ED976E7063E4EA837C3DABC71910915615A9F4E92CC33D0EF14A2D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  files/jre/bin/api-ms-win-core-file-l2-1-0.dll
- Size 18KB
- SHA256 e8e3550084cf30e16b16216266bc73b07c1a05bbfd94ee3f645122d3d167d7e6
- MD5 72d542226f067dae07562fd093b0f5f0
- SHA1 c0f7f85753bb351c51dd8e36ca2366a3b24c73ba
- SHA512 2fbf32b38852def53891a73b9b33f33de96ca09102baa8c37f02d1b3d5076b26d2a32f2e79aab1009dc5b2464abf50c956c797ba4321fd37ea13900753a1d182
- SSDEEP 384:rVKWfhWUC77q0GftpBj/3uOHZZZD7lGi3+4zTT:rVj8iR31ZTDbVvT
- TLSH
  T1208218C1DABCD583ED97AD7023E8E9837C3D9BC31910915614AAF5E92CC33D1AB1892D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  files/jre/bin/api-ms-win-core-handle-l1-1-0.dll
- Size 18KB
- SHA256 9aa764023ddb501050f43d1af0ff87f592ed14c4f022ba58270c3315386141b0
- MD5 3b620d81c727a8aba6dc6895af695d35
- SHA1 21641bc6c802d0ada3121d14c2a8de4e708c74bc
- SHA512 54af2248017db94ef81a5c4ba6496127f1e305e292bd165563929dd88ad756b15edb5f0e2e3da367581c0c9cd92e04699e28bcac12130299949b13267414d228
- SSDEEP 192:gWfhWpJJo7kuDBks/nGfe4pBjSH/72+R8WebtuVaVWQ4CWlW1Bqnaj87X/f4CXkZ:gWfhWnC77q0GftpBjMMZPHl9V+HW
- TLSH
  T1808228C1DABC8583ED97AD7023E4E9837C3DDBC35910916615A9F1E928C33D1EB1892D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  files/jre/bin/api-ms-win-core-heap-l1-1-0.dll
- Size 18KB
- SHA256 17415ecd7f34def148a91defe99155b71c8048e253315b2d24d499b99207f618
- MD5 d54e0da17090c6911db3fd0770faf91e
- SHA1 5538096f53b4160ef2e91987d57d2da0ddb9b6ba
- SHA512 680142c329f6ab44cfeb7eb1572f296918866c9ca3ac9e66ae13ef38d79dadac9bf367e6dc6655c7e404cb6b243f3518639acd9cbcd9a37da5812823d43886d3
- SSDEEP 192:zZliWfhWNuVTBuDBks/nGfe4pBjSfC0Zj8WebtuVaVWQ4yWrVqnaj6Q8vwSEitH0:1liWfhWkTMq0GftpBjh5Z4l78oS/Tm
- TLSH
  T141823A95CABCD483EC97AD7022D8EA837C3DA7C61D20815619A9F5DD2CC33D1DB24A2D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  files/jre/bin/api-ms-win-core-interlocked-l1-1-0.dll
- Size 18KB
- SHA256 e81e0d9b2b09524e5790617547bb8bd8ef3dacdd001bd19057c4f8943d996227
- MD5 2ca477f1799fc97d6bd05437bdfd0017
- SHA1 31feb0b42e9237cddc5e47c3f4a076de86ca600e
- SHA512 c0c991341619548e6944a78a090e1dd942140342d8cb77f41ba559b56034dc46a3ac731d2e2e67a7de1f6a65e26ca0c6a3eb358124a03eab55c2b5d061b64717
- SSDEEP 192:XWfhWw6ivT16uDBks/nGfe4pBjS7118WebtuVaVWQ4+WwCqnajjpxf5in0o:XWfhWqvT1Nq0GftpBj5ZElBPinb
- TLSH
  T16A821992CABCD483ED97AD7013A4EA833C3DEBC75D10816615A6F5E928C33D1EB1492D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  files/jre/bin/api-ms-win-core-libraryloader-l1-1-0.dll
- Size 18KB
- SHA256 f9457d0ddfa864e4bb383759bd7bbae961098055216b0b7d7d40c11084a1561d
- MD5 d6db1a6b5087a82e766fe7e9f818c135
- SHA1 d786b2d8ab10edf0e893fcfbf52b03bceb15f53a
- SHA512 6118ed237839a49567340aca7a76d8ea366537942da060d4afc0399a88603f7f02a93c061be4475f35599d3cab8233f3925a491f4aa094bfbecd2adc5d3e65f1
- SSDEEP 384:3vuBL3BtWfhW1Q7q0GftpBjqeZ6vSlxBup:mBL3Bq9i0e9+
- TLSH
  T1798229D28A7C9583EDDB9D7013A8E9837C39D7C7582054AA09ADF1E92CC33D1EB1492D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  files/jre/bin/api-ms-win-core-localization-l1-2-0.dll
- Size 20KB
- SHA256 2dea4ae5df0f7daa37e26dd0f9232f867884f57e850aa85062594b54f3a81e98
- MD5 55902b92bbbca7a2d11a946297f583e6
- SHA1 b6158f009d98a98ed2e56d377f9c4b6323b852fc
- SHA512 85e0df8a390260e4e0cc0a9372dfd3c55464486812926775a5f9f5767157b88783e03701b1f1c28f34e822b21ea7436c3e8270df58f8de3ec1b15f68b633f4fd
- SSDEEP 384:DmDEhROMw3zdp3bwjGjue9/0jCRrndbPgWfhWk80aq0GftpBjgNZa7q3lxBug:xOMwBprwjGjue9/0jCRrndbJciqNzj
- TLSH
  T177A23B92C6BCD243FC8E9D7132A6D9837C3CD7C60821599612E6F7A828D33D5E754A2C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  files/jre/bin/api-ms-win-core-memory-l1-1-0.dll
- Size 18KB
- SHA256 65bd14bfc1f14c35e345412ba5e9642e7f6c286f95de014c0f3af100e88b4467
- MD5 8fc176a3a6550f90e73d6da8445e8780
- SHA1 5d249243678a789ce56037d0d1b36420d97dce06
- SHA512 808daa3369df6704151b67f246eed90cc32d9110653faf06e973b97900003c8b7dc26095abf420d5c078e9546699c4b3debaf410819cd6060d3feb481576eefa
- SSDEEP 192:gOWfhWpHJo7kuDBks/nGfe4pBjSHubs1nfi8WebtuVaVWQ4CWRXqnajnp+MVo/4t:gOWfhWlC77q0GftpBjU1VZ0ldBogfxW
- TLSH
  T12A8239818ABCD583EDC7AD7023D4D9837C399BC75C60556610A9F5E92CC33D1EB18A2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  files/jre/bin/api-ms-win-core-namedpipe-l1-1-0.dll
- Size 18KB
- SHA256 a319a14b76d8d67272128461f1cf53924dc2759ac72a76571f8b31e2f737553d
- MD5 27a8f9e71a2f2d134c55de62fad6cf0e
- SHA1 b60944dbf9a50a166b71fbc58305c3d559c4157f
- SHA512 3904895242acccec14feea4b7bda654a0eca3ef716df560764ca28f97eaeed10e94f5a0d46a633fa0671682188e4bc7b99b13649354bc26a88ca8211ee36307a
- SSDEEP 192:gWfhWNy4V10b8uDBks/nGfe4pBjSfOeN8WebtuVaVWQ4yWW2qnajBdrnDKgq+0:gWfhW0+10vq0GftpBj2GZt2lTDKFv
- TLSH
  T1D68219A1CA7CD583ED979D7023E8D9837C3DE7CA1810916251A9F5E92C833D1EB24A2D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  files/jre/bin/api-ms-win-core-processenvironment-l1-1-0.dll
- Size 19KB
- SHA256 e17aa51c5520a623dd530889838c54ddea91e06e235003833e019095f5458ad0
- MD5 ef80685a812d9c252de35fc9b38bad11
- SHA1 c641bf0f41d0617b25aa20d63b033236ad3133ac
- SHA512 431ea4ae368b2cf55542ad614cca8e24fa2cecf0c5163bddc3742412a6e43f53ee69d7cfd1931e59eae9ee8671598ea35d0936850e6b733af14a4a5ecbd79437
- SSDEEP 192:Q9WfhWNvJo7kuDBks/nGfe4pBjSf5pPtE1i8WebtuVaVWQ4yW12yqnaj6Q8vwSEb:Q9WfhWpC77q0GftpBjQtE1tZql78oS/i
- TLSH
  T109922AC2C9BCD443ED87AD7022D8E9937C399BD31D1040A614A5F6E92CC73D1EB58A2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  files/jre/bin/api-ms-win-core-processthreads-l1-1-0.dll
- Size 20KB
- SHA256 6bac5963da125b3e314beaef5903d37316e162eb92e7c0f0b9946044eb0bde01
- MD5 ed69bc0f310c5ce427e25973a0a52c31
- SHA1 0bd1683418c952490f6a791a044b5840f5dc90b5
- SHA512 4fe23992c6ea37a2f88cd2e3519559b08cb302f51f35b1524816a6e29e1412c2e6e1a214fff6d6ff50d0f7b410591abd57fd7a87c987f18106c6ec44d991666b
- SSDEEP 384:9WXk1JzNcKSI4WfhWo+10vq0GftpBjHJZ3nnlxBu/:9bcKSATiVJRtU
- TLSH
  T13A9218D686BCD183FCCA9D306395E9833C3AC7C61D25516206A9F5E93DD73C2DA2892C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  files/jre/bin/api-ms-win-core-processthreads-l1-1-1.dll
- Size 18KB
- SHA256 0ec2b6ee5e8ee5ee22b810795d097dd769ef054eb394355eecac1a1fdc18c971
- MD5 d2eeb9f6789213bfda7fe6bcb2a1540a
- SHA1 c330267c8abd56c04204deee9aabd566268daf97
- SHA512 7795e972f46ec84cb1709354a40684593947cbf6b4df373cd823134a0b2deec7e5dc738a74c13c2accb74c467892d9a2375a96ab85147ae42fadc627a0f7e2cf
- SSDEEP 384:Et0DfIeOvWfhWK80aq0GftpBjeA7ZsWElGi3+4QF:ENeO0+ip7GPVo
- TLSH
  T1F5820795CABC8583ED87AD702398E9837C3DE7C72910946115AAF1ED2CC33D1EB1492D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  files/jre/bin/api-ms-win-core-profile-l1-1-0.dll
- Size 17KB
- SHA256 978419fea728f20a4df8046e75b880343cd425548f8bc38e8c0a6e8c315c4310
- MD5 46361d1f7b60b86f128f4e23c95cc3e6
- SHA1 8c621d8dc4ec4fe3a9f40d25ba3dc26a19a02994
- SHA512 25f033816b7dbd387134fbf72f5c6ee351bec480a4975659702b0912d204486826e64612b94646056d97111612fa8a322547aef8755469f8a6edc45fea534322
- SSDEEP 384:hoWfhW3+10vq0GftpBjsYQZCxW/l78oS/qGO:LqikDaS/
- TLSH
  T16C821892CABC8483ED93AD7062E8E9837C3DDBC76D10556605A9F4ED2C833D1EB1492D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  files/jre/bin/api-ms-win-core-rtlsupport-l1-1-0.dll
- Size 18KB
- SHA256 7857b0c9c6517102ae5e047d7fe1cb0f85424f1ea01fcdc66afdc231f3127906
- MD5 210b0178e7aca6b9444e2d10ac6ee054
- SHA1 2ea3c9d780f6c3dc60b6247b3fb0dd5a8dc638f3
- SHA512 3b3d10262bbca6559b2223be60f0d61a77ada9c147b167641de58b418634963bcdfc37fb4b11cf65517f5a3e29adb785e83c379a056c4992ffa59a468ec393f2
- SSDEEP 192:OVGeV7WfhWN54V10b8uDBks/nGfe4pBjSfbn8WebtuVaVWQ4yWngqnajBdrnDKgR:WGeV7WfhWT+10vq0GftpBjtZVlTDKtaF
- TLSH
  T11D821996CA7C9583E9D3AD7023A8DE877C3DABC61C50516214A9F1D92CC33D1EB14A2D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  files/jre/bin/api-ms-win-core-string-l1-1-0.dll
- Size 18KB
- SHA256 952b0ef3b3cc8d15c91e4e6605d49ea6bcee1459f465b99dd22decbce69012fb
- MD5 7f8e52ff5a64d2d471413e288a591866
- SHA1 cefad6219c916307e0bf7ef1382512c2cd4c2d5f
- SHA512 7e9025f0eee30552e24425c0d7fe441264a905469755f2aa94863d68f8d53da654a83b4146695d0320f5ad3538a2fd716619baf615d9b29d8767ef6296088253
- SSDEEP 384:QyMvKWfhWiR4Zq0GftpBjufZZ5LlTDKvI:QyMvjZ47iaj5tEI
- TLSH
  T15C822A92CA7CD483ED939D702395E9873C3C97C71C2091A625A9F1ED2C833D1EB1492D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  files/jre/bin/api-ms-win-core-synch-l1-1-0.dll
- Size 20KB
- SHA256 6defa74d4bf10f95815d965547065b5af5fc4154d93757735ebbe6aeca570ba8
- MD5 599025b219fb4f70b3f93eb0d4d12bb1
- SHA1 c1ceab162231476cfa9aa35a54400f3d959369bb
- SHA512 1b4e6af508ac9d353b0e2d02344181ea57ee654f505e04d3b6a7d758fbc0a72875d72ec185c138e69e1d7dfee3459e96c64cf6a2436db1c7425748556f99b922
- SSDEEP 384:ldv3V0dfpkXc0vVacWfhWBR4Zq0GftpBjskKUIwDZ/l78oS/Pj83:ldv3VqpkXc0vVaVK47iBjDDac
- TLSH
  T149922892C6F8E583EC9BDD7052D5D9837C3887C70D20956224A9F5E92CD33D1EB2892D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  files/jre/bin/api-ms-win-core-synch-l1-2-0.dll
- Size 18KB
- SHA256 ae460b343b6fad12d26feeee14e68efb97e59686dbd2cb22ab228619508944c6
- MD5 8f469c5b261e003ed991f570aea8f29f
- SHA1 848046907a02d605d53a31748d8dcca18d11259b
- SHA512 f393b8c9ef4cbd6f660093016fd5a3267b5afaf4c26262f2fc3c52351c697ccc38744e530f779707f802398aa01a7eaec191497949d2c1fa5b34b8d33153beea
- SSDEEP 384:2tZ3PWfhWXvT1Nq0GftpBj/fZAnlBPinbP:X61vi9SrWP
- TLSH
  T1188219D2CABC9583ED97AC7013E4E9833C3D9BC21920556615AAF1E92CC33D1EB14E2D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  files/jre/bin/api-ms-win-core-sysinfo-l1-1-0.dll
- Size 19KB
- SHA256 bc7203c7c0c539fd225701e39f1e430367376cd580af52cdf9dff680046027ff
- MD5 f58fd490561921c154c31c05bbb63a3e
- SHA1 d5f009e7cbb070b35ed81acd68710716bf971b7a
- SHA512 8389e2834559681accdc3ded3a8be06028e5e3fb8d62cafd218c545dff052604bd0b0c14a4956eeb7653522c05b45d05d072e44c4f125b0e5567d3a23318e8ae
- SSDEEP 192:ZKIMFKDWfhW2PJo7kuDBks/nGfe4pBjSfEvI68WebtuVaVWQ4WW7IoL1qnajqgYa:ZbDWfhWOC77q0GftpBjLvWZC1lxBu4
- TLSH
  T1BE922892DABCD543EC879E3022E9E9833C3CD7C25910915A01E9F2E96DD33D5EB2492D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  files/jre/bin/api-ms-win-core-timezone-l1-1-0.dll
- Size 18KB
- SHA256 8c2d7b0dca0702b8f1870c9c404f41e00624132b239deb7917096dfed8ca1507
- MD5 f2d0493794b45c6a2629fc9c5c80f832
- SHA1 12460ab8f625ecd0e0a02b4fa82061c2ff4644b8
- SHA512 4f44ea443413c3709c1521de0b9dc5c05ef9a4f853062e44658d7bc54663115afc1f04927797a5406b388cd5c9e226c9fea1f73f0c288999105d9db42fa257e2
- SSDEEP 384:IFWfhWvJvT1Nq0GftpBjVHbZJlTDKPdxe:7Q1viTHbB0+
- TLSH
  T14E82F892CBBC8583EDC7AD7013E4E9837C3CEBD75820556614AAF5E928833C5EB1492D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  files/jre/bin/api-ms-win-core-util-l1-1-0.dll
- Size 18KB
- SHA256 b4afba280abaf5dd28d92d452b958e440c88a26ab7359a3200876a35775a33b6
- MD5 e0b524ff31e7c651eee7d83b1c7cc2d5
- SHA1 d29f001b843e452cae91a2d01ef338373fb24763
- SHA512 4d3dfbcefb85b8d6ef874cfdf04594ea4d6c58ae7de544588a9cf8646897aaf9b46bdccfe9e6f7cd87d00a58d5c595973493fa6cd6d82266b1a27736d4e15ded
- SSDEEP 192:zyqWfhWN1+Jo7kuDBks/nGfe4pBjSfmSPc8WebtuVaVWQ4yWIpaXqnajUEomuKAI:zyqWfhWz+C77q0GftpBj/SbZAl3u7dkf
- TLSH
  T1478219928ABCC483ED976D7012E8E9837C3DDBC66D20519605A9F5E82CC33D1EB1892D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Badlisted process makes network request

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32