General
- Target sped-debug-1.0.0.jar
- Size 15KB
- Sample260714-bbweksdz4x
- SHA256 1e33f235af49eaa30cc83098cb0ad9d8a9cc3a948542e81d0d569ba2da8fe5c8
- MD5 adcc6c56b97fdd2a7baaa03ce9cf063b
- SHA1 73c4189cca47eb8dbe840473dc80fd43e990af1f
- SHA512 8b39149318707e26762a191ec2741aabbed437aafad6168dac6ff80894632a94de1a76e4e878c0873ec791a762c766f2c964e54bacfce30128beec835271c6eb
- SSDEEP 384:UWqS5klj/uJpUAqtXZdFwmb2JuXUdale2lpNwmbO4yqX2:UWqSOlSJyXmm8uXUl2DXO2X2
- TLSH T1B1629E726DA4EC17CF47503BE052E1A4A161E6B9C724698B190429C91EE4FBF730BE8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
sped-debug-1.0.0.jar
Resource
win10v2004-20260513-en
0 signatures
600 seconds
Behavioral task
behavioral2
Sample
sped-debug-1.0.0.jar
Resource
win11ltsc2024-20260709-en
23 signatures
600 seconds
Malware Config
Targets
-
- Target sped-debug-1.0.0.jar
- Size 15KB
- SHA256 1e33f235af49eaa30cc83098cb0ad9d8a9cc3a948542e81d0d569ba2da8fe5c8
- MD5 adcc6c56b97fdd2a7baaa03ce9cf063b
- SHA1 73c4189cca47eb8dbe840473dc80fd43e990af1f
- SHA512 8b39149318707e26762a191ec2741aabbed437aafad6168dac6ff80894632a94de1a76e4e878c0873ec791a762c766f2c964e54bacfce30128beec835271c6eb
- SSDEEP 384:UWqS5klj/uJpUAqtXZdFwmb2JuXUdale2lpNwmbO4yqX2:UWqSOlSJyXmm8uXUl2DXO2X2
- TLSH T1B1629E726DA4EC17CF47503BE052E1A4A161E6B9C724698B190429C91EE4FBF730BE8D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies WinLogon for persistence
-
UAC bypass
-
Disables RegEdit via registry modification
-
Drops desktop.ini file(s)
-
Sets desktop wallpaper using registry
-
Suspicious use of NtSetInformationThreadHideFromDebugger
MITRE ATT&CK Enterprise v16
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
1Winlogon Helper DLL
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
1Disable or Modify Tools
1Modify Registry
3