afc80ff5adedfa9679d7464a88e1f4630d0306633785582c4b303fa11f3bf1a2

Sharing

Copy URL Twitter E-mail

General

Target
Xenon-client-SRC.zip
Size 388KB
Sample260905-c4jf6astaw
SHA256 afc80ff5adedfa9679d7464a88e1f4630d0306633785582c4b303fa11f3bf1a2
MD5 88c92adffaf20fe32fe41b12991eb3c3
SHA1 fa44365f3cd094fcf6c6d8b5156a65f0a8a9f258
SHA512 6f6eac10d6469859443fc0e6316ea31c64dfa78824ac7261656a95076aa964f706ff1c2dac42df896e1c82a90aca955b632feb0a0fab3d5c430ff927ce9348cf
SSDEEP 12288:BsIZC/EjTCHmJc3kMCrE2ylFY4r9NCOzlQ:+IZ2EO0MplFYiS
TLSH
T15F84E029CA9C4870E22E6379B4748571B8617579B095F302696E8BEF2CC7A710F4F31E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

execution linux

Malware Config

Targets

- Target
  gradle/wrapper/gradle-wrapper.jar
- Size 42KB
- SHA256 d3b261c2820e9e3d8d639ed084900f11f4a86050a8f83342ade7b6bc9b0d2bdd
- MD5 9846c9b2cc594aea28243e4ef3979c36
- SHA1 dcbc7c8821eb4e4214f47b47e88d006f01d204e0
- SHA512 3977f2e0fa949cd14147bf7e17741ff40dc9a8e89e94c00ca65a61ef2341953a054610ff0ab5cb1aac0932adb49253faacd3fa2aefbf00a128cb0f29c9822f1d
- SSDEEP 768:u5w3HAkgBpG5SAZg8nVTSbuibpaEFnILQ7DIolvCdBZjWDfE:mw31EpG54yVQumpNBTD/lvCJjkfE
- TLSH
  T14613AE16AD5C9609C197053F246B86428A35A31E84CDDB3F1AB9270C8FD139F9B23BDD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  gradlew
- Size 8KB
- SHA256 fc977a94723af68aaffa4e5d60496fb4aeed1884b6b19e5e2f2fd7612673313d
- MD5 1db6d150e9a9442ca929c1fa8b2fd25e
- SHA1 42468a0c00fe36e3e4fb82b2fad8f5402160688c
- SHA512 369de6664b08b61d3eb6911af351cd04e6a069045a596b8b02f819a0039a1614b2da0ac93755018f8e8b0ba2e5972f12d07401ff920a34ccb7e8ebee2dc3aeac
- SSDEEP 192:SyWm7HOyzJ1XnRy26M2hI+vcHD7oRDe7PSRe5WW:S/mtzJZRyvPhbFRKSR+9
- TLSH
  T142021C6357812334074506776E9FB0EEA72162BF1F83291C749C960C373A97A61F2AED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4 behavioral5 behavioral6
- Target
  gradlew.bat
- Size 2KB
- SHA256 18774a0ac0203f6893bf1db3291a0d77f06cd1b4dca2a43b51e7009da3e28cfa
- MD5 d7a461fc63ba188edf97f78829fd4652
- SHA1 4d4fbe1fc89951b51f53a220138bbd9c2b4b3937
- SHA512 2ddcc733b85fa8ff5648a57de49aa4ca035afeabbb1c668cb5003c70554ad65a07fb401fbaf14c5e377296c714bf646647b87ef1ddce7190551a013c563b110a
- TLSH
  T1235173FB370B517B1FBD0B6A7E0C45827B12A3AA1E47E30C940F840D7231B4A51C1BA1
- MD5 SHA1 SHA512 TLSH
Score

7^/10

execution
- Loads dropped DLL
behavioral7 behavioral8
- Target
  libs/DiscordIPC-0.4.jar
- Size 27KB
- SHA256 23219d945ce85838dd47446272417044de6c856d1421bb7d0642e3cb17d658d1
- MD5 2987b170c992e480ffbd67ae3635a3a8
- SHA1 06b8207476b78f86c4c1b221371e6ce27a361fc5
- SHA512 4ecec5464cf3bad0e2b07d92bcd9be5c81c578fe240c27ff512cbc621817df1049b6e0b37d8e805bb7c921a10fc35a28b3d1810801c0b21ee9aab5bb2ca52879
- SSDEEP 768:f+b8h4AYKC/lCJIfLSNbMuofBtm6iLuNOHATRSRY:f+b8h4AYXfGZMhBHfNck0W
- TLSH
  T1BCC2BF3B7CC428D5E1978C3A2290D647BD2A89DD804BB09B17E00C4E3625EC6BE44FDB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10