d913c8630aed1d7262a8f782ec3672892419841264b7d2017fc6400b3128a9df

Sharing

Copy URL Twitter E-mail

General

Target
grim.zip
Size 154.2MB
Sample260827-melv4afr8x
SHA256 d913c8630aed1d7262a8f782ec3672892419841264b7d2017fc6400b3128a9df
MD5 9e9627862dea5f60eced0012a3e6c409
SHA1 3ba9366bc92f1a361711fa5ce629c5fc067bd07d
SHA512 464f8159f961dea04dcee072dedfda546f40b2ad3ffde432ab62d7e95af35931e0679553a7346e6510534987570fc1753f597946b79f0cd9fc2285dc4228157d
SSDEEP 3145728:IoVRpYjyrF3JnhLuHBk9BBeqp6qnZuoFxspHN0DGLEabw20ElNpNP6YqbCSoqYU6:DVRpp3/LuHBYx/ZREHmyHw2Ppd6Y0CSg
TLSH
T1DD7833B871F842D67A1BF167947B56517EC0A0D183E6EF27733E2110288258DFF690AE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution

Malware Config

Targets

- Target
  fabric-api-0.139.4+1.21.11.jar
- Size 2.0MB
- SHA256 3d379228d2b966956b227781c5db2ac8ad89428d4e1f98787baca332a97e9c5e
- MD5 65199b2bf0ca83d9241599563c6280af
- SHA1 c0d3aa489c6c2f8806f236b3580e776da30a1c85
- SHA512 871f5da6dae20095583ac6a871ee13e34151e458a1dac70d3a3de46982464407b0f7af921a3286fede46f27cc2378299ed1c937fd6895f75428445f46d33e4af
- SSDEEP 49152:xSyv5CjI1HQx8GsxHh0j62iaqM43fi+LcnDlnBQElysjlv/J15eJY:N0jI1wfUBba46GcnBnB15nT6Y
- TLSH
  T152A53325E7B0B5ECC343F67688D2645CF255F9C97B481B3661B0041498A8EDFDA0BE8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  instance/mods/fabric-api-0.139.4+1.21.11.jar
- Size 2.0MB
- SHA256 3d379228d2b966956b227781c5db2ac8ad89428d4e1f98787baca332a97e9c5e
- MD5 65199b2bf0ca83d9241599563c6280af
- SHA1 c0d3aa489c6c2f8806f236b3580e776da30a1c85
- SHA512 871f5da6dae20095583ac6a871ee13e34151e458a1dac70d3a3de46982464407b0f7af921a3286fede46f27cc2378299ed1c937fd6895f75428445f46d33e4af
- SSDEEP 49152:xSyv5CjI1HQx8GsxHh0j62iaqM43fi+LcnDlnBQElysjlv/J15eJY:N0jI1wfUBba46GcnBnB15nT6Y
- TLSH
  T152A53325E7B0B5ECC343F67688D2645CF255F9C97B481B3661B0041498A8EDFDA0BE8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  instance/mods/offline-client-bootstrap.jar
- Size 18.9MB
- SHA256 9dcb8180a206528d25f6ee1707730ea7f53099e4f4b13cf283be62c24c8b9c02
- MD5 c5f91ce1126fae84121569b8d9c398cb
- SHA1 9af0c0dd6957aa788799336d1b7d20fa1f8cfa83
- SHA512 b3fe3b4ce7884d63929f40519f44fd42b48323700b4ca77196d9f6f7787f1d8c54a4f5ad6b95bf758b0a2f4766e6f55eca14bb5cf5fd7981fed82200f6370f0f
- SSDEEP 393216:RT1hj9l4jgepTl62MJ9+JD8qb7qkAoCgn32TmVYFd:LJ9l4jgeLtMJ0J40q2CgnGTQYFd
- TLSH
  T14617337AD4FD909BF904A977181B1E815ACE80D2D3FBCF65F36E32584E81E49D22819C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  META-INF/jars/protected-payload.jar
- Size 2.7MB
- SHA256 7b53ebca6a6eac14ba5cafb897751464689ddfad88cfb8877f895bbc04205587
- MD5 e158fb417d16fd40fb554cd5e3725da7
- SHA1 20f14db33bf21597cca9632c79c34c0810717c8f
- SHA512 12b08b603009eee23133eb1aeb897909ae45190ce456932650a0209093a9ca757f3029d1ff6fd21a0fb2dd3557996dd9316fd764d759a8d13e661bda9f1676dc
- SSDEEP 49152:Sec8E8bBJ7PHG9ydePAgbDWtK/RTuva/q52AFJ+xJG+qBj+w3SxCQzBILQt:8UTG9ywbbDWtGy2k+3G+qBpsCQIO
- TLSH
  T1E5D502553D94D835D82F603480839266EE4803E8D80B9DEB27E4DD9A39F9F4A0767BCD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  fabric.mod.json
- Size 500B
- SHA256 464977d7ef86adbac4ce58e73929c3226761d6f8c48b8f575ccbbd535ed2a52c
- MD5 a168547e8945e94cbb696f37147ec0dc
- SHA1 4d95d63036c411d0e1959d00cd2f95b10d7177f0
- SHA512 f742bdfb243ea2b9bad05772b370c830386f1c9813c45f1aec5caa10ebcc700309689b0ac85d66538da630e24e11589d0f0c6cc68e2d28815b26079dc0fc0e80
- TLSH
  T14CF05200CF234E6792C8636A2E1E40C765B04AC34789380CA3EA550EBFAD027227B41E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  offline/stage2-runtime.jar
- Size 11.3MB
- SHA256 7f8224dc4c5c70677d1697155c147d6629e1be974336a12b80325f4284d88235
- MD5 313b72f68895e356f1f4cfdca0e79869
- SHA1 1862c433d61050650f857c1de4623515f57a2794
- SHA512 e2a45629127700da8d86051a5f132ab8438f0582791204ff97eced0866dce5aa13f721576190efe0bfce4b33111cbb841460d39615f9482406d4d963a2fe3038
- SSDEEP 196608:pvm3wypE8Dt797VF/Hg4KqgiwEKj5iPav4JZWw/Eb+zDAv28SmqvDLmIFCRejdiH:IAypES93AEgiwEqg1zOkbLmI0e04ts
- TLSH
  T19CC6335DAC59D269F452C433101A8BAC9845C0DAE3FAF737277813A94893C89D72B4FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  instance/usercache.json
- Size 425B
- SHA256 e03806a45a6af9b1af56b4c932f528a9978a265f11912b875f4783a9c9b27762
- MD5 133c260c38767c63a70e1bc8e4f74f23
- SHA1 5a9256f6884d6cf39eab834f074815a4b5681193
- SHA512 3737ca13ac5dceb2af7bbedd2b81ebb9b9a26ab4bfc0b1c4775f587f119aa642e22d6c46e107dcef97792e2a20849b98867eea13ee54ecfced213c8517239bc7
- TLSH
  T177E0E58B33A0287A1C08BF6B83433AD9B9013512C698BCAF22669A05084483394F3524
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  launcher.exe
- Size 12KB
- SHA256 7c3d88a3d34e4ec6baeeae47e124c656c1e41b24025f756e60239a2bdca4e157
- MD5 b167d5f736339a2d64d0cf5e8982b737
- SHA1 36758f384b17e72efc666fa71d580393b5a6db81
- SHA512 bd4de0b5583ba5dcee5a8a82c534a86dce79f6d124a652bbaf5bf3a1d0138e9e688a0fd558af415b0b7723fef25e6566534ee8c35ee405d9ba900d779e271825
- SSDEEP 192:I6X09BFzBOjHcIx1M+qt+U4+v+8lHU5n3W3yPY:I6XzHbxa+qtKKc5n3WY
- TLSH
  T11042850833F80A18F1BF6B3A9EB146211B36BE5B5A35D71D19A2458E0E71F408C96F77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  runtime-args.template.json
- Size 9KB
- SHA256 7b06f2dd3dda6a68c803930af8882390a535ff76c021ab4b86c52064fdc58273
- MD5 869dbba4dd4e237c3ca5799ca9035641
- SHA1 a66b45108d051b083ac707c54ff0029ed870f61b
- SHA512 a89d7f5cfafdf6184e7f0d3689aabee745668487d656ca72094fe664f4afd06152a83d0a7e458d08976cd18b5d9ade3aae37dccb6bf0b398e7829cfcfc861e60
- SSDEEP 96:NDRFM57ha3BUy2P6c6dteVCC6MY2eKc6qHkOHRw3xyx9x2xCAwh1po:pyVa3B/2P6c6EOHRw8hpo
- TLSH
  T1B9228F31EA08BC45B3F75D19A2A4D90E643E0BAFBD64B2F491E4B24639FB5861701373
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  runtime/native/exit-hook.dll
- Size 104KB
- SHA256 670b05a5abb07190bd422dedee776fc37859cc6b1d9422cac9d5677b7aa4a5e4
- MD5 474c837c3f7db30c179e296d37b08a91
- SHA1 6e11f8914988af74ea2237be980a6ffe9b9136f5
- SHA512 94837cd47875662a2ceb8bf85945a6ffbc194a1e0dff1e7067c3d6ca50abd16d865f35ff8b0a984cb950e6ccd04e89faa914349b7413111aec4fb1c77481bec6
- SSDEEP 3072:XEMWPKlSVZAGrQAOUaGLN0vuNYmSO/2nePGyufbHDvr//8o7njWmAtpFrpcLmuAM:XElVyGsIRLN0Gedk6
- TLSH
  T16BA35B5B63EA00BBE277863885A30A09D772F8554761AFEF43A0065E1F233D18D39F61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  runtime/native/jna1.21.11
- Size 279.4MB
- SHA256 9403e1fdd549fb34076c62d0cf92cfb4f23d99dc7e8ff5b6f9b4579c7bb72b2d
- MD5 463e0e1882d309b2e1fd37c07c6c0fc0
- SHA1 f29b52533bd6da0cb4581d6877aeed4524db640e
- SHA512 77aa423c078f082070bd74eef8d8fddcbc2da65afa8ccfbb7b47c8abd6d2662c5e10c5fd75552c22e153b9ad3ea067e1be9f154624f36723235f7bb4086d0dc9
- SSDEEP 3145728:HGYhZO8yqdK008ARKcuURFGtGfifFLDo:mY77yqdK0MRDh1
- TLSH
  T117E808BBD4D0C5E5C47FB03C96BA1B0A9C957A0C7974B5DB5A3320222D23ACFD985C98
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  runtime/offline-client-bootstrap.jar
- Size 18.9MB
- SHA256 9dcb8180a206528d25f6ee1707730ea7f53099e4f4b13cf283be62c24c8b9c02
- MD5 c5f91ce1126fae84121569b8d9c398cb
- SHA1 9af0c0dd6957aa788799336d1b7d20fa1f8cfa83
- SHA512 b3fe3b4ce7884d63929f40519f44fd42b48323700b4ca77196d9f6f7787f1d8c54a4f5ad6b95bf758b0a2f4766e6f55eca14bb5cf5fd7981fed82200f6370f0f
- SSDEEP 393216:RT1hj9l4jgepTl62MJ9+JD8qb7qkAoCgn32TmVYFd:LJ9l4jgeLtMJ0J40q2CgnGTQYFd
- TLSH
  T14617337AD4FD909BF904A977181B1E815ACE80D2D3FBCF65F36E32584E81E49D22819C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  META-INF/jars/protected-payload.jar
- Size 2.7MB
- SHA256 7b53ebca6a6eac14ba5cafb897751464689ddfad88cfb8877f895bbc04205587
- MD5 e158fb417d16fd40fb554cd5e3725da7
- SHA1 20f14db33bf21597cca9632c79c34c0810717c8f
- SHA512 12b08b603009eee23133eb1aeb897909ae45190ce456932650a0209093a9ca757f3029d1ff6fd21a0fb2dd3557996dd9316fd764d759a8d13e661bda9f1676dc
- SSDEEP 49152:Sec8E8bBJ7PHG9ydePAgbDWtK/RTuva/q52AFJ+xJG+qBj+w3SxCQzBILQt:8UTG9ywbbDWtGy2k+3G+qBpsCQIO
- TLSH
  T1E5D502553D94D835D82F603480839266EE4803E8D80B9DEB27E4DD9A39F9F4A0767BCD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  fabric.mod.json
- Size 500B
- SHA256 464977d7ef86adbac4ce58e73929c3226761d6f8c48b8f575ccbbd535ed2a52c
- MD5 a168547e8945e94cbb696f37147ec0dc
- SHA1 4d95d63036c411d0e1959d00cd2f95b10d7177f0
- SHA512 f742bdfb243ea2b9bad05772b370c830386f1c9813c45f1aec5caa10ebcc700309689b0ac85d66538da630e24e11589d0f0c6cc68e2d28815b26079dc0fc0e80
- TLSH
  T14CF05200CF234E6792C8636A2E1E40C765B04AC34789380CA3EA550EBFAD027227B41E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  offline/stage2-runtime.jar
- Size 11.3MB
- SHA256 7f8224dc4c5c70677d1697155c147d6629e1be974336a12b80325f4284d88235
- MD5 313b72f68895e356f1f4cfdca0e79869
- SHA1 1862c433d61050650f857c1de4623515f57a2794
- SHA512 e2a45629127700da8d86051a5f132ab8438f0582791204ff97eced0866dce5aa13f721576190efe0bfce4b33111cbb841460d39615f9482406d4d963a2fe3038
- SSDEEP 196608:pvm3wypE8Dt797VF/Hg4KqgiwEKj5iPav4JZWw/Eb+zDAv28SmqvDLmIFCRejdiH:IAypES93AEgiwEqg1zOkbLmI0e04ts
- TLSH
  T19CC6335DAC59D269F452C433101A8BAC9845C0DAE3FAF737277813A94893C89D72B4FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  runtime/stage2-runtime.jar
- Size 11.3MB
- SHA256 7f8224dc4c5c70677d1697155c147d6629e1be974336a12b80325f4284d88235
- MD5 313b72f68895e356f1f4cfdca0e79869
- SHA1 1862c433d61050650f857c1de4623515f57a2794
- SHA512 e2a45629127700da8d86051a5f132ab8438f0582791204ff97eced0866dce5aa13f721576190efe0bfce4b33111cbb841460d39615f9482406d4d963a2fe3038
- SSDEEP 196608:pvm3wypE8Dt797VF/Hg4KqgiwEKj5iPav4JZWw/Eb+zDAv28SmqvDLmIFCRejdiH:IAypES93AEgiwEqg1zOkbLmI0e04ts
- TLSH
  T19CC6335DAC59D269F452C433101A8BAC9845C0DAE3FAF737277813A94893C89D72B4FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32