2bd5594022d557d30e1b6bae6d183b85f3585f89c384db1e5dce33e16b796583

Sharing

Copy URL Twitter E-mail

General

Target
Just.Shapes.and.Beats.v1.6.50.zip
Size 754.2MB
Sample260713-2gkhdab12w
SHA256 2bd5594022d557d30e1b6bae6d183b85f3585f89c384db1e5dce33e16b796583
MD5 984bdb8dbd4097821e36433117dd7aea
SHA1 9f3ec8cd1bfbbeebdd20ac1ada4e2c3cbcbd8df2
SHA512 e9e2ddcc87991f3cca5619fe212361fce4daf0b6472d152a5c03f585372ba202901ee73db49e10e52453d93866ade64ee07adbea851a6d4fa162e129121b178a
SSDEEP 12582912:p6LdJ77KuuJ0k5qn5lsEpgzJ3z9M02dBZrPUeGJJZg03Yq2Mw8itf/WpR/YkfXCc:O9muzk5qsEqzJeBZrPLGfz3prw3tGH/P
TLSH
T11C8933154F80024BE72A7932709F69433F6DC69BD39B20A5EE17E4224D7BA13067F61E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Targets

- Target
  Just.Shapes.and.Beats.v1.6.50.zip
- Size 754.2MB
- SHA256 2bd5594022d557d30e1b6bae6d183b85f3585f89c384db1e5dce33e16b796583
- MD5 984bdb8dbd4097821e36433117dd7aea
- SHA1 9f3ec8cd1bfbbeebdd20ac1ada4e2c3cbcbd8df2
- SHA512 e9e2ddcc87991f3cca5619fe212361fce4daf0b6472d152a5c03f585372ba202901ee73db49e10e52453d93866ade64ee07adbea851a6d4fa162e129121b178a
- SSDEEP 12582912:p6LdJ77KuuJ0k5qn5lsEpgzJ3z9M02dBZrPUeGJJZg03Yq2Mw8itf/WpR/YkfXCc:O9muzk5qsEqzJeBZrPLGfz3prw3tGH/P
- TLSH
  T11C8933154F80024BE72A7932709F69433F6DC69BD39B20A5EE17E4224D7BA13067F61E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Just.Shapes.and.Beats.v1.6.50/Just.Shapes.and.Beats.v1.6.50/JSB_Data/il2cpp_data/etc/mono/2.0/web.config
- Size 11KB
- SHA256 3c1a76a5849074b437d297656a208a3bef6d84b982153542b9c797046c601dfc
- MD5 2b6303c4f12762b71051db6e947f90a4
- SHA1 a4d7e05516f63d6ab67327b299d4fb2852cb840b
- SHA512 80f5da60654e1851ef21526e434b32d94e18883a08bacbbaa0e1f85b80469c46510b6ddb9b429f16cc4be89c6f2bb2627bbae9cb1d0c7e45b665efb7721c6d86
- SSDEEP 192:wcedeaZ0sEMYaWN5bs6yyzEVkEYEG/Z1f5v6CuCCrtQzPwkP/waeKjy:wj5YaWPs6/1zwya
- TLSH
  T1FE32BD34171DEDDD8B9066530420ABE162BF9B5A2744CD4CF1EF2329EB5548BE3611E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  Just.Shapes.and.Beats.v1.6.50/Just.Shapes.and.Beats.v1.6.50/JSB_Data/il2cpp_data/etc/mono/4.0/Browsers/Compat.browser
- Size 1KB
- SHA256 8a1082057ac5681dcd4e9c227ed7fb8eb42ac1618963b5de3b65739dd77e2741
- MD5 0d831c1264b5b32a39fa347de368fe48
- SHA1 187dff516f9448e63ea5078190b3347922c4b3eb
- SHA512 4b7549eda1f8ed2c4533d056b62ca5030445393f9c6003e5ee47301ff7f44b4bd5022b74d54f571aa890b6e4593c6eded1a881500ac5ba2a720dc0ff280300af
- TLSH
  T1EA3171A238DCACE0ED7300B3FA1F14897F1A897F5B8A1505748BA1560B019B443BB39D
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral5 behavioral6
- Target
  Just.Shapes.and.Beats.v1.6.50/Just.Shapes.and.Beats.v1.6.50/JSB_Data/il2cpp_data/etc/mono/4.0/DefaultWsdlHelpGenerator.aspx
- Size 59KB
- SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
- MD5 f7be9f1841ff92f9d4040aed832e0c79
- SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
- SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
- SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
- TLSH
  T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  Just.Shapes.and.Beats.v1.6.50/Just.Shapes.and.Beats.v1.6.50/JSB_Data/il2cpp_data/etc/mono/4.0/machine.config
- Size 32KB
- SHA256 6919d5af506aae0d93e91bd83418a81895a5554b9f54cf94aad20d025a4db664
- MD5 24c866ce8037fcdca2287234eddff637
- SHA1 9245befcd116458e9619694f1a785c50fa61b58e
- SHA512 f9960b5d5e7db35fe4a492dbba1f90cd0f0f0c4d84349baf33de3a941de57cffdec670b5be9862306503f7b5d57a697208921e7099cea13d4daf3310840ff4d2
- SSDEEP 384:PbtltttttSRtNRtcRtGrRtSRtBDRp5Rt70gRt2RtTf1RDRty6ugyunHMSeuWuGR0:7Kn
- TLSH
  T1FAE2F0703609BDEE08432B235C6499C447BF57096AA86C4CB5FF725CEE2688B97132D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  Just.Shapes.and.Beats.v1.6.50/Just.Shapes.and.Beats.v1.6.50/JSB_Data/il2cpp_data/etc/mono/4.0/settings.map
- Size 2KB
- SHA256 ce1db1ad8a9512073164e3eccdc193f7eda036e1a9733caec4635de21b2865c8
- MD5 ba17ade8a8e3ee221377534c8136f617
- SHA1 8e17e2aec423a8e6fb43e8cbe6215040217bb8a3
- SHA512 c18bcbcbd4b9a20a72b1a934d70db1eafef047f34f3ba2c6357d8e3afed07ecaab861e5571ceb58c22d4d3e5ebb34b51e366a0553c3153fbc263d1d80472e297
- TLSH
  T1DF511238F748B5F50682092EA45A84D243B6063FB679499C71ECD13D6F2684B93B32DD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  Just.Shapes.and.Beats.v1.6.50/Just.Shapes.and.Beats.v1.6.50/JSB_Data/il2cpp_data/etc/mono/4.0/web.config
- Size 18KB
- SHA256 f1a6416eeedd9d040387fd85dcf7d6e074b6644c6829d08be220ff9fc32efb31
- MD5 b127480ee9f0b8dab6a3f73ad79dd332
- SHA1 7d776d730cbd253564713f36573dd8366782788c
- SHA512 00ddca43ad38127cf71477810c46617fc2ccdc33f197e26ba761151107eff701fec2caa51e43575fb5b4fbc11f640f525ba70b6b3e97811cecabc63773492401
- SSDEEP 384:lJJuAr8F1mJ1ayCk5+HK5YaW41DBWTwahst/tlLvSqwwU4FVXaS7L3nHIXYFXc//:jbpJX91Xbi
- TLSH
  T1E1820030472EDEDE8E522B9355208A9272AB575B23449C8CF1FF2365EB46487D3321E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  Just.Shapes.and.Beats.v1.6.50/Just.Shapes.and.Beats.v1.6.50/JSB_Data/il2cpp_data/etc/mono/4.5/Browsers/Compat.browser
- Size 1KB
- SHA256 8a1082057ac5681dcd4e9c227ed7fb8eb42ac1618963b5de3b65739dd77e2741
- MD5 0d831c1264b5b32a39fa347de368fe48
- SHA1 187dff516f9448e63ea5078190b3347922c4b3eb
- SHA512 4b7549eda1f8ed2c4533d056b62ca5030445393f9c6003e5ee47301ff7f44b4bd5022b74d54f571aa890b6e4593c6eded1a881500ac5ba2a720dc0ff280300af
- TLSH
  T1EA3171A238DCACE0ED7300B3FA1F14897F1A897F5B8A1505748BA1560B019B443BB39D
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral15 behavioral16
- Target
  Just.Shapes.and.Beats.v1.6.50/Just.Shapes.and.Beats.v1.6.50/JSB_Data/il2cpp_data/etc/mono/4.5/DefaultWsdlHelpGenerator.aspx
- Size 59KB
- SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
- MD5 f7be9f1841ff92f9d4040aed832e0c79
- SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
- SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
- SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
- TLSH
  T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  Just.Shapes.and.Beats.v1.6.50/Just.Shapes.and.Beats.v1.6.50/JSB_Data/il2cpp_data/etc/mono/4.5/machine.config
- Size 33KB
- SHA256 ef9b9387168fd1dd6c996f96c134d9c44f8eb06f9587004bf997252a520182d6
- MD5 0869544722561f5aff0eefc83fc7b001
- SHA1 1e118f4b5c1c6a7b1858e3fccb1b1d1095561976
- SHA512 ced7c9a5363cabdb87b01ed6b4ca190a690640dddf5cbcc0438acdc611a8ee942cb6cd73c78d3fc2d59f70171f22ac832a10b1e23758dc92599ee24acd978ac2
- SSDEEP 384:PbtltttttSRtNRtcRtGrRtSRtTf5Rt70zDgRt2Rtuj4f1RDRty6ugyunHMSeuWuh:dkn
- TLSH
  T13CE2F1703609BDEE08432B235C6499C447BF57096AA86C4CB5FF725CEE2688B97132D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral19 behavioral20
- Target
  Just.Shapes.and.Beats.v1.6.50/Just.Shapes.and.Beats.v1.6.50/JSB_Data/il2cpp_data/etc/mono/4.5/settings.map
- Size 2KB
- SHA256 ce1db1ad8a9512073164e3eccdc193f7eda036e1a9733caec4635de21b2865c8
- MD5 ba17ade8a8e3ee221377534c8136f617
- SHA1 8e17e2aec423a8e6fb43e8cbe6215040217bb8a3
- SHA512 c18bcbcbd4b9a20a72b1a934d70db1eafef047f34f3ba2c6357d8e3afed07ecaab861e5571ceb58c22d4d3e5ebb34b51e366a0553c3153fbc263d1d80472e297
- TLSH
  T1DF511238F748B5F50682092EA45A84D243B6063FB679499C71ECD13D6F2684B93B32DD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral21 behavioral22
- Target
  Just.Shapes.and.Beats.v1.6.50/Just.Shapes.and.Beats.v1.6.50/JSB_Data/il2cpp_data/etc/mono/4.5/web.config
- Size 18KB
- SHA256 15a2c7a9242bf54d3ccb3e07fa6d8f84ba8b303d8877243787a1103009941bdb
- MD5 08101241b15b53ef0ab908f6d388881f
- SHA1 ea3e2ad6d71d483c54b12852dcbdcd0baa569988
- SHA512 a1ee7f17bb069ac42483d1f98ca839ff1bd06f3fc15cd379dff4aca3732a5dac24dc17e15acc8f8fa39e60e186219f4fd70664f9ea284002274a4ff8609791ed
- SSDEEP 384:lJJuAr8F1mJ1ayCk5+HK5YaW41DBWTwa6st/tlLvSqwwU4FVXaS7L3nHIXYFXc//:jbpJi91Xbi
- TLSH
  T14D820030472EDEDE8E522B9355208A9272AB575B23449C8CF1FF2365EB46487D3321E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral23 behavioral24
- Target
  Just.Shapes.and.Beats.v1.6.50/Just.Shapes.and.Beats.v1.6.50/JSB_Data/il2cpp_data/etc/mono/browscap.ini
- Size 304KB
- SHA256 4ddd50f31fb968f30bedefc253a46dc3f2890192d05cdaa9e0a64a056eee807e
- MD5 378be809df7d15aac75a175693e25fbb
- SHA1 2d5454e161de8a5b65910f27bd70d9d0ad8fa476
- SHA512 d0d181e806cbd2c016eb0a8786f7d9db877463eaac0195db4e891be111c9ed87491a1abcfa0d9ed7c2743e004e1f4a3f4789333d0b535e63358c672ae833c363
- SSDEEP 1536:D+dN5JLXlU4XteKJeYPMxBUm9huPj3bkeoO3cTKr0AzhjRzi0v5XfDlVlvr778BN:DYPEBOPjLkeOTA0AzhJMutEbbt0oK7M
- TLSH
  T18364FCC27495A47A9135DF3234F2D34957B39B9A8CBF9C4CD8628810DE61C0653BBAF2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral25 behavioral26
- Target
  Just.Shapes.and.Beats.v1.6.50/Just.Shapes.and.Beats.v1.6.50/JSB_Data/il2cpp_data/etc/mono/config
- Size 3KB
- SHA256 60099cf91bb1a5717fc1f2d23cf36a61d3bfb70d9489fbb6f4bae98c560bf3d5
- MD5 d9bc824737177af5792846f26507231c
- SHA1 c44835e4881d95a97b597bebff5deba0233a5887
- SHA512 f9558f9e985643d8205b5534998412a5896bb6f5712bce5d6cf27469200eed64f29efc01936ab00c4a93625b0fc573036fba00ba2c4eb1d1d7c47555608f11e8
- TLSH
  T114610CABF16C48F87171266692FFFBEC51B380A0DD3D2105AE11DA021927F67C853AC6
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Just.Shapes.and.Beats.v1.6.50/Just.Shapes.and.Beats.v1.6.50/JSB_Data/il2cpp_data/etc/mono/mconfig/config.xml
- Size 25KB
- SHA256 0c56e34c69124510fa8c19e7b4c2ca6c1c4ff460ae19f798dd0ca035809e396d
- MD5 f34b330f20dce1bdcce9058fca287099
- SHA1 936520d5bb5c00a1985d7a4c4f0ef763a9031862
- SHA512 d6d4a8321eb44c117755a41a2590296be86a0568d27a5347f9d7f32f2d151d8f7e169675c83faed2dab5ad0f8d81858f8cd1167e439cd4bff7e68c243e3544fd
- SSDEEP 192:Bt074zTxASaKp3T7pJsPpPT8B13eeaVonGdEBMmhVbeyeTfWDBzmAwdavahmhNIa:LAMDp35JyPCCu96yJwgag
- TLSH
  T1E9C25025B9FC9DE7050240236E61A1969F7383B7527C3808B0FD63989FAA54743932FB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral29 behavioral30
- Target
  Just.Shapes.and.Beats.v1.6.50/Just.Shapes.and.Beats.v1.6.50/JSB_Data/level0
- Size 25KB
- SHA256 304a3b88c6e9fbc8d21286a5fd59e70102dbb6fce903453d53e1e6a3f5b04aa0
- MD5 7e3b83c610b5b6d887a65cf014de975c
- SHA1 9321c77d55c9a512b5f18462b89b3137560b37f5
- SHA512 b8293c088ddbd01173d3a8455d20be82c0b9b66747599d37d89dca098624603b86cd0425b2cba34a20de2cb7e23255526cea77990e2c3b15fb466ed2c87c169b
- SSDEEP 96:Z5f5n+6DC6IL0lwA41UA/1BA/1GA/1K21n9C4HJQJS5iLmtoGmnKeufL1XFDqzE2:t/DL1k4pcS5731XK7FoN
- TLSH
  T145C2C741B790D912C53512328CABEBECA732F884DE86572331DA636F1CF23D45E966D8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32