6aeb88c1ea36d896e9f3f1d5716d7bf309b089fd4e91b7bfbbc1d9f846d93e28

Sharing

Copy URL Twitter E-mail

General

Target
justice-launcher-setup.exe
Size 6.9MB
Sample260813-dgp6vszgma
SHA256 6aeb88c1ea36d896e9f3f1d5716d7bf309b089fd4e91b7bfbbc1d9f846d93e28
MD5 48fb75f5881a038e1d00a49a485304ba
SHA1 438f035426dddb6ecc655d8d7078f28da76084dd
SHA512 d4076501114eb043f5ec0f683c4e044cf65ea03324ee83e1accb54867d44f6c79db77745905157e0e4a8cb2953563448e0e5ebdf839c3f959e28309f5e61131d
SSDEEP 196608:/ccC1MOrN+VsNQN6l3rZHPffqkkFZGrOf/RFsE:/U1MOrsVsCw7v3qyrOfXsE
TLSH
T1687633289177AE5ADF930DB0A23B9A139155F10213232BD5AE10D6FC1D9F192BE0D9F3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  justice-launcher-setup.exe
- Size 6.9MB
- SHA256 6aeb88c1ea36d896e9f3f1d5716d7bf309b089fd4e91b7bfbbc1d9f846d93e28
- MD5 48fb75f5881a038e1d00a49a485304ba
- SHA1 438f035426dddb6ecc655d8d7078f28da76084dd
- SHA512 d4076501114eb043f5ec0f683c4e044cf65ea03324ee83e1accb54867d44f6c79db77745905157e0e4a8cb2953563448e0e5ebdf839c3f959e28309f5e61131d
- SSDEEP 196608:/ccC1MOrN+VsNQN6l3rZHPffqkkFZGrOf/RFsE:/U1MOrsVsCw7v3qyrOfXsE
- TLSH
  T1687633289177AE5ADF930DB0A23B9A139155F10213232BD5AE10D6FC1D9F192BE0D9F3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery trojan
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/NSISdl.dll
- Size 15KB
- SHA256 ddf40229dd9d6b268902d8dea88c8a04aacf1af218dd29f6dcd35babc54ac08d
- MD5 8eabbe36e8b52e69322780d0f541fd19
- SHA1 e5fa3eca8d2035e4fa006b7123c348348e4e6de4
- SHA512 4189fabff409be4bc7a8e81be58fb18e32398e4ef4c01a70cf823d79e76f47c4681734808fd61db8728c73d2bcad890b09aa09d5a0f0b0c3ad581be1beaf9ce7
- SSDEEP 384:jrSQMCOUILnCaSPy/yhJzmGSMRWyOUKie:jrSQMCOp0yamMRWysie
- TLSH
  T17B623C16B62084F5DBB2167034D73B3E6BB28F6A1A2848C34BF35C4E9E52307B675D85
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
- MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
- SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
- SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
- SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
- TLSH
  T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
- MD5 8f0e7415f33843431df308bb8e06af81
- SHA1 1314272e6ad3be1985d4a1607b890a34b0bde8b5
- SHA512 5450b2070c40b257c28ba9a472d762f91b78928d1e8d4d88e0576992065a61fb9a6513006e6b5947c415c9e02ae80a90a85b58da7e016a424331c8cd596ed684
- SSDEEP 96:obEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YHNqkzfFc:obEvCu5e81785qHFcU0PuAw0uytIFc
- TLSH
  T19D12F892E2A454B3C5D6523B36AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/nsExec.dll
- Size 7KB
- SHA256 b121689861b506dbc9c3797b49bc8a90d555cb7db58cb959165cc758391c00bb
- MD5 8fe362ffdfa66269b8a64e3a87f68e52
- SHA1 b5daaa60a6b8591a670da9fc3a2d6f896d55f568
- SHA512 8f2904e01b0835683a0f11114a09da291ba527d867e73db2765185f780f2278debd9c5fc4281a42a6065c5ef5947bdc6239ae4c5835df62c71e1fce80d8bf942
- SSDEEP 96:JXzdzBzMDhOZZDbXf5GsWvSv1ckne94SDbYkvML1HT1fUNQaSGYuHnDQ:JgQHDb2vSuOc41ZfUNQZGdHD
- TLSH
  T1F8E1193571C02DF7E08D89707816BD2F83F4D43627BA05A04A771AD579D0AF6EE28B42
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  bundled-mods/justice/Justice-1.21-1.21.1.jar
- Size 2.1MB
- SHA256 e215c2ec5273ca6a4d057a23a319a954fd8aa93dd577f158d831f7612ccab9ce
- MD5 f4aa4d61c90075f17ede7872d467c588
- SHA1 b33dd91343b624fdd44575eacc8e224472642fb6
- SHA512 d19b63b1b1dedf65a13eb1be2c449137014b55fb0698f92ac11ab1b89d2ed8b720de5ace2790af9a4d495477d3eb400df417b4548606e65f6da6ff37b126a584
- SSDEEP 49152:24uwulP0sTpS4O4+4/dVBWXLMK6H3PHOqBAWA8Ah2ho4qR:s10sTpPnXBW7MKWN3A8IR
- TLSH
  T17EA52342AD88CB3DD613863A5252C1C7105B22CCE25A913FBEB5150FE9F1E57274BBE8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  bundled-mods/justice/Justice-1.21.11.jar
- Size 837KB
- SHA256 916630995359a92302a5309a79fcb64feb5aa49ebff67a8d025e4699695d88c4
- MD5 191b9debae7aca960fb6173b4d164e1e
- SHA1 cdfa541211572284c822416546227de49c8e2484
- SHA512 d0cb093686512446938154916648ef4cc7e75b55dca2f30fb98b697ca34c54485882d183f6895fc3a9f6772425cd6dfedab04c73d04f14a5d8e660f7598a97a8
- SSDEEP 24576:upnDOfbeQQFGkDDmbntNT6AhFREgGY6sZCT/hGh75pv:ukeQAGkDCz3eRCZCTpW5V
- TLSH
  T19B0512197D86876DD51340BAC121C6E7A09A07D5E206A13F2D77005AAEE8C4F2F17EFE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  bundled-mods/justice/Justice-1.21.6-1.21.8.jar
- Size 836KB
- SHA256 a4d623a82574015697e6c45881f1d59ce4f18f4861862aec2e3908ee5c8e7569
- MD5 503314f5f2328376194591be0450eab0
- SHA1 638e7f3a95bdb85953c8f7cf84467fcce8423bee
- SHA512 7ecb81a5eb72ac62ede740d0ae26524da33fa727b9882b84e8c801b324d73674da3005e9d56b76ae464c90cf3f466a0c022dcff04f4116314b8b94ba0f573002
- SSDEEP 24576:UpnDOfbeQQFGkDDmbntNT6AhFREgGY6sZKhtAAT1KJQ:UkeQAGkDCz3eRCZwaa
- TLSH
  T1430512087E86876DD11740BAC12285E7A09B07D5E506A07F2DB3015ABEE8C5F3B1BDBD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  bundled-mods/justice/Justice-1.21.9-1.21.10.jar
- Size 757KB
- SHA256 ae7f219610e5501a62f92cca60ecf712e13ce635f4f59bd3afc5cf190a6f420b
- MD5 18e09e4f3032eeb65b6fa0d45362a9e7
- SHA1 2207379fb0af1d1dcf8977c72e88617a4620de0d
- SHA512 ea80c1b7ba7cb7c5382301f9ccda9f0a557447921692c8a40100c8fd4209189a9f626288ea59d2ae882dd9fdaa0bab2f2eeb21189b8e91a311e5ef5de1e68b35
- SSDEEP 12288:twF8+YBFDeQZeFGxSYEV9Wpc6nN0kntNT2yAcxhFF7ExyGYyd5CULIjZTercavJ6:GF8fbeQQFGkDDmbntNT6AhFREgGY6sZT
- TLSH
  T1F7F401187E9A836DD11304BAC12285E3A19B07D4A609A17F2DA7005DBDE8C5F3F17DBE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  bundled-mods/justice/Justice-26.1.1.jar
- Size 827KB
- SHA256 6b83466d076ec94ac2c997709e41f9fe0e5f701c6898036e575e69d4e5a1a05d
- MD5 1506db95c5f0c51177530864dd776cbd
- SHA1 f89a92161c88c4fbbba39dc5e826663260af90f0
- SHA512 b735965417abf8b08efebcf34c226fb16e571183bb4f70bf9897b6e4aa74708b1772240300b8b14a8c492e393771d8055e49a490d90867556f60bfa0a969de97
- SSDEEP 24576:fOBz1fbeQQFGkjjGbHNNTaghFxEAG4as5dYWVgC:2HeQAGkjCTX+Ri5KUgC
- TLSH
  T10605122979D6C761D16305B9C321A1E3E1EB02DCE606613F3DA6011BADF8D082B57DFA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  bundled-mods/justice/Justice-26.1.jar
- Size 827KB
- SHA256 6b83466d076ec94ac2c997709e41f9fe0e5f701c6898036e575e69d4e5a1a05d
- MD5 1506db95c5f0c51177530864dd776cbd
- SHA1 f89a92161c88c4fbbba39dc5e826663260af90f0
- SHA512 b735965417abf8b08efebcf34c226fb16e571183bb4f70bf9897b6e4aa74708b1772240300b8b14a8c492e393771d8055e49a490d90867556f60bfa0a969de97
- SSDEEP 24576:fOBz1fbeQQFGkjjGbHNNTaghFxEAG4as5dYWVgC:2HeQAGkjCTX+Ri5KUgC
- TLSH
  T10605122979D6C761D16305B9C321A1E3E1EB02DCE606613F3DA6011BADF8D082B57DFA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  bundled-mods/justice/Justice-26.2.jar
- Size 828KB
- SHA256 b08c0db4c46c38ea720d4cdb241de3d85b43d9e2f3b6336478712c62515d1632
- MD5 91e9d5cea206bc9c7e1b0d4083278168
- SHA1 871294b5f7176749c52e7d83e72de01591d1cb39
- SHA512 7a5ea379105790b752261fd4a76f425b4fd416bbf3626d1dc5c7a3a82cad7f4ec83f0b75ea59437e638f8b1ecb3fe6ce901e89052ca8ceb7738a6b221eca28ed
- SSDEEP 24576:qOHwzFlkOfbeQQFGkjjGbHNNTaghFxEAG4as5yX:NHLCeQAGkjCTX+Ri5yX
- TLSH
  T11205122979D6C765D16305B9C322A1E3E1EB02ACE506713F3DA6010EADFD8093716DFA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  bundled-mods/justice/JusticeV-1.21-1.21.1.jar
- Size 2.1MB
- SHA256 e215c2ec5273ca6a4d057a23a319a954fd8aa93dd577f158d831f7612ccab9ce
- MD5 f4aa4d61c90075f17ede7872d467c588
- SHA1 b33dd91343b624fdd44575eacc8e224472642fb6
- SHA512 d19b63b1b1dedf65a13eb1be2c449137014b55fb0698f92ac11ab1b89d2ed8b720de5ace2790af9a4d495477d3eb400df417b4548606e65f6da6ff37b126a584
- SSDEEP 49152:24uwulP0sTpS4O4+4/dVBWXLMK6H3PHOqBAWA8Ah2ho4qR:s10sTpPnXBW7MKWN3A8IR
- TLSH
  T17EA52342AD88CB3DD613863A5252C1C7105B22CCE25A913FBEB5150FE9F1E57274BBE8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  bundled-mods/justice/JusticeV-1.21.11.jar
- Size 837KB
- SHA256 916630995359a92302a5309a79fcb64feb5aa49ebff67a8d025e4699695d88c4
- MD5 191b9debae7aca960fb6173b4d164e1e
- SHA1 cdfa541211572284c822416546227de49c8e2484
- SHA512 d0cb093686512446938154916648ef4cc7e75b55dca2f30fb98b697ca34c54485882d183f6895fc3a9f6772425cd6dfedab04c73d04f14a5d8e660f7598a97a8
- SSDEEP 24576:upnDOfbeQQFGkDDmbntNT6AhFREgGY6sZCT/hGh75pv:ukeQAGkDCz3eRCZCTpW5V
- TLSH
  T19B0512197D86876DD51340BAC121C6E7A09A07D5E206A13F2D77005AAEE8C4F2F17EFE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  bundled-mods/justice/JusticeV-1.21.2-1.21.4.jar
- Size 821KB
- SHA256 2d039d1e1361da4bf543205e0e92ebc5c2654bcea2d3c85ff5cf206d2206f730
- MD5 d1cc4cf1d03d21cfb6fbe264440c1b46
- SHA1 380d97f1b4ca4524a65986888fc7a04cef9f23e1
- SHA512 c452eb5eb0c0b553223780abc8db457ad3ae0724ec470174f85ec54e5d5dc32933caf18c2de44540e4e74c59c954719371b0e7e96e93b293b29b8e9890484965
- SSDEEP 24576:0ppjKoUZEfbeQQFGkDDmbntNT6AhFREgGY6sZUQG31Kr:6h3aMeQAGkDCz3eRCZjr
- TLSH
  T188050218AE96836DD01341BAC222C5D7A19B03D4A506A07F2DBB0159BDE8C5F3B17DFE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  bundled-mods/justice/JusticeV-1.21.6-1.21.8.jar
- Size 836KB
- SHA256 a4d623a82574015697e6c45881f1d59ce4f18f4861862aec2e3908ee5c8e7569
- MD5 503314f5f2328376194591be0450eab0
- SHA1 638e7f3a95bdb85953c8f7cf84467fcce8423bee
- SHA512 7ecb81a5eb72ac62ede740d0ae26524da33fa727b9882b84e8c801b324d73674da3005e9d56b76ae464c90cf3f466a0c022dcff04f4116314b8b94ba0f573002
- SSDEEP 24576:UpnDOfbeQQFGkDDmbntNT6AhFREgGY6sZKhtAAT1KJQ:UkeQAGkDCz3eRCZwaa
- TLSH
  T1430512087E86876DD11740BAC12285E7A09B07D5E506A07F2DB3015ABEE8C5F3B1BDBD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

Checks whether UAC is enabled

Network Share Discovery

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32