General
- Target baritone-meteor-26.1.jar
- Size 1.5MB
- Sample260724-hrd9katvf1
- SHA256 00b93b5000b773c843da707eaa53444d3b645d8c7dcd6174b3f0e33d0fd1fe47
- MD5 cee3d5ae5b2479df40fa03b1721eee6d
- SHA1 9c75a3abf620d9639a8cac7271ebc33be80fe4b3
- SHA512 ba3c65e6f74e278c4b372c02825eecef6247c4cc5549e450594492158b056833ef0f66db4dc02cb2952f3ea10b41c67dc4a67f09fb7193802e8827ae01112449
- SSDEEP 49152:gUgGWlNHAumyknYOwHe7zrR+bGj4LJq89vap:ZWl2ZnL7fQakLJq8Jw
- TLSH T1957512887CE89869C1870133138E8387F554D2CCCD54F96F62B76BC5A9E1A6B5B0278F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
baritone-meteor-26.1.jar
Resource
win11ltsc2024-20260709-en
28 signatures
900 seconds
Malware Config
Targets
-
- Target baritone-meteor-26.1.jar
- Size 1.5MB
- SHA256 00b93b5000b773c843da707eaa53444d3b645d8c7dcd6174b3f0e33d0fd1fe47
- MD5 cee3d5ae5b2479df40fa03b1721eee6d
- SHA1 9c75a3abf620d9639a8cac7271ebc33be80fe4b3
- SHA512 ba3c65e6f74e278c4b372c02825eecef6247c4cc5549e450594492158b056833ef0f66db4dc02cb2952f3ea10b41c67dc4a67f09fb7193802e8827ae01112449
- SSDEEP 49152:gUgGWlNHAumyknYOwHe7zrR+bGj4LJq89vap:ZWl2ZnL7fQakLJq8Jw
- TLSH T1957512887CE89869C1870133138E8387F554D2CCCD54F96F62B76BC5A9E1A6B5B0278F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UAC bypass
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
1Disable or Modify Tools
1Modify Registry
2