General
- Target Krypton-FREE.jar
- Size 4.7MB
- Sample260728-mp2pasvwex
- SHA256 d160951d3c6a4b4c6feba8b4f18070c62ed2b70f3a8dbc48693bfbf6020dc3e8
Score
7/10
Malware Config
Targets
-
- Target META-INF/jars/DiscordIPC-master-SNAPSHOT.jar
- Size 28KB
- SHA256 fbda95b60aba45985c9dd0fc3252785a38326e2ba7f01a862326bec1b7e59ef3
Score7/10-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Executes dropped EXE
-
Modifies system executable filetype association
-
- Target META-INF/jars/java-spotify-api-1.4.6-all.jar
- Size 3.5MB
- SHA256 09d83e5ffd72d34ad39ff658d1fa094310ae99fdd2fb9008e179a6cae3569feb
Score1/10 -
- Target META-INF/jars/json-20240303.jar
- Size 77KB
- SHA256 1f15ac509a426a53c6ebf3c081e8a956fec1b3ff884eb78160dee42a09888bd0
Score1/10
MITRE ATT&CK Enterprise v16
Persistence
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1Privilege Escalation
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1