68230e87ed304de1d5e97c7add31cea0004d823ac1022b30e7295971af07ccb7

Sharing

Copy URL Twitter E-mail

General

Target
Job Aplication Creeper.zip
Size 329KB
Sample260905-c8f7lastfy
SHA256 68230e87ed304de1d5e97c7add31cea0004d823ac1022b30e7295971af07ccb7
MD5 799f76fd8bf065b354e1a6bf4e234758
SHA1 72e93758e6126d8ccba8911e7be912568bbe6589
SHA512 d7c72c878bae541bf81e559261fdc43dcdd65129804d981df69750c1553f7bde258bcb0b69250e3326173f202ccef90cfff1058c2508bff73a5a7e5353d9d8e3
SSDEEP 6144:BI2CvMiw+3NR0uv2neyzfv2neyzLUDAW5PHfj/FmRz1C1B:62CvMiwQQuv2tfv2tLcPHrFa1CX
TLSH
T17A74232F2E8D3C78CE38FE788D27718B94AC12BEB9EEB44F641DD249A18548131C9175
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Job Aplication Creeper.zip
- Size 329KB
- SHA256 68230e87ed304de1d5e97c7add31cea0004d823ac1022b30e7295971af07ccb7
- MD5 799f76fd8bf065b354e1a6bf4e234758
- SHA1 72e93758e6126d8ccba8911e7be912568bbe6589
- SHA512 d7c72c878bae541bf81e559261fdc43dcdd65129804d981df69750c1553f7bde258bcb0b69250e3326173f202ccef90cfff1058c2508bff73a5a7e5353d9d8e3
- SSDEEP 6144:BI2CvMiw+3NR0uv2neyzfv2neyzLUDAW5PHfj/FmRz1C1B:62CvMiwQQuv2tfv2tLcPHrFa1CX
- TLSH
  T17A74232F2E8D3C78CE38FE788D27718B94AC12BEB9EEB44F641DD249A18548131C9175
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2
- Target
  ad0eb185a8e29287.png
- Size 2KB
- SHA256 77dec4033fc9c3fe4bb7333f306a81687a96ed884d0963d6f030c03290e48598
- MD5 6cf9b7998c9236e50c22d4086d665acb
- SHA1 21473d13260e43c21e3ca5d6d2aa7a12e2ff8679
- SHA512 85408e47c0876bb175c770885490e514f9948c2bc8523bf99b4641e25d14d3c09eb6807bfe40e9a54305bdda8216171fea96f2b451d9d3f7ddd71d3be95dc87c
- TLSH
  T13D412A348F27F788EE8F58C6A5E6DD08E99659B5C560E62A9810D3202271E81CE68594
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  assets/minecraft/optifine/cem/creeper.jem
- Size 3KB
- SHA256 90e48c52dad9e929319ddb79b680dd627897a325a049743b5503a7a14cefd487
- MD5 4cd3bcac78cc890f9d5791c031229b7d
- SHA1 4c20695cfd0105a194fd94560676d3002498d0e9
- SHA512 d38189803f1ffa8b2549be54b286976337107ff69e9fcb6678ffbd945767bb5d2f01be865ee0b11dc52803f604a91ad991989d83913820c2986c6f794dbfd0cb
- TLSH
  T1CB5127CF8B2F489F0680B617297C1ECA598C81F909C786D7F5D80A96575403841BFB79
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  assets/minecraft/optifine/cem/creeper_charge.jem
- Size 2KB
- SHA256 297a256c230a38a9891871d7db342b95b04d15c708a27eb63190a792535e7c4a
- MD5 2d9d7e5474ae1cc300c15782b3585222
- SHA1 55e5cface8196cb3caa6f6ae29e6aeea0267b774
- SHA512 5d67f0f33ab13e662a4f2ec2f94edda00c2707b4440d597b86205a724dbbe9f06363483a17e75b16255a7461d657b09620f847e4a7ccb18bdbc4c41a00077005
- TLSH
  T13A5136CF8E2F499F4580F5177A3C1ECA598CC1F909D696C7F9980A96475003801BFB79
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  assets/minecraft/optifine/cem/head_creeper.jem
- Size 657B
- SHA256 9ab6c84c5da243b5a4980526c6b3040a2414154e9fe0dbb5e9f5357ce80576fc
- MD5 c86aea0fdc35e87dc9ff024ad63be97e
- SHA1 d6db5d9b242ed4dcc6459d4361f6b21dece39531
- SHA512 f464f3c0b10d152ba156d1a28a6c4e2eadde8eb160681d18448c0919c82b00991194741fcb55ae0a3c215f9a7de5930782c14db289a11de3791567c56da28927
- TLSH
  T1580146DF463EC4DF55A0ED0A1AEC0ED6018C82F82ACA52DB70D88A57939143400BFB15
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  assets/minecraft/sounds/mob/creeper/death.ogg
- Size 22KB
- SHA256 62f106054e48696f8eb9881f83d21838da02c983ee8382af289d7ce6551c8979
- MD5 02109e4d8aa9328041115104a8bcb31e
- SHA1 1b2d740ef27375b3602f212be831cbfb90eb2a18
- SHA512 300438c1e50e743228dc308a2d65f5966c18f4da1bd64d26e082d8aa05fecdefec55f4a500927bdc182e0607699a859b9272f759404f94ee8348b9acec5e423c
- SSDEEP 384:cItDzCPCc0BiUNsLJ5JNdL4LPsV3Pvx4Kak+oxQWXYlIB:z4PCJBiU69XbL4rs5nxIGIa
- TLSH
  T139A2D0A7FD6DAA4FDC1D7531067C17AE6B7A79B006A003C7FB2441B949A7E08B82108D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral11 behavioral12
- Target
  assets/minecraft/sounds/mob/creeper/say1.ogg
- Size 15KB
- SHA256 ba9f8fe46d964350af44fb72dc81f5e96b6890ebca0bde1bf5bb492593bd492b
- MD5 c479cb3afb65fd4b634de5c184547116
- SHA1 3d84b39e6a66b007fb0aa2e14d546c66642562ee
- SHA512 e8ea7cc36bd452d6354355fabb09bac3bb5d9f28cf661dd5d97f72106bcd05b292c2feb29e36f3daac08c8090199f48b34491f14e04b96aec0e44fabbc14d6bd
- SSDEEP 384:otDzCPUOzQAnBAgURu9aY4zGUpploasOcumSjyFg0QOri:o4PUY5nOgmzGUaaO387
- TLSH
  T1C862AE97895EDF51DC191170827C6FAA03B97A716AF033E3A76128EA1FA13494431AA8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral13 behavioral14
- Target
  assets/minecraft/sounds/mob/creeper/say2.ogg
- Size 13KB
- SHA256 2d88fc85e91ae2eb66cdf25a6e3b53c68db18e19f02485e5b3773aca1d21c9c8
- MD5 45231d312e876e42f646a99ab759b9f3
- SHA1 4a42c5447683c42426de3ef10d293488d656b323
- SHA512 7a702e4d5548edf0e43e54f83efa7dffc1fceea8b5a2d97fc6a737755895034ecf31127a8c5f766a6fcd2328100a6f600d6bbe1eb28ab97df17f36b97de0486f
- SSDEEP 192:tttxOIOWOKxCPs4OLgwZ09J2DpmpdG4TiXlA7VfidtznVMpZO5Q5txK:ttDzCPiZABP5idZnV66MK
- TLSH
  T1CA52AEE3EE0E99CDF83B237489381B27137535748BF467EA5324A4F61AA97846C3105D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral15 behavioral16
- Target
  assets/minecraft/sounds/mob/creeper/say3.ogg
- Size 31KB
- SHA256 ed163c63aa01297a9cbcd2a801676bb98e9ed6635c3acd27b77e700190a14d16
- MD5 e99a8744fa208b00de833f36a949ce5a
- SHA1 e166355dd45a3808e633e35d0e28916c3cd7ef8d
- SHA512 9523c4f188d171d77f96c70c072fd84f08e86930e61745aba5120763062c23053800a4586676feba6b090d7a36351eeeabd3e8fbef52a42c71e0cd5cac696915
- SSDEEP 384:ytDzCPjYDaUAnWjpHn7qJTNblil/3KOmYKIQ6TTzjaxbSiLK2LYr76rcXLLISzak:y4PPdWdbaZxuPkILfzGJSiy6YLISzWwV
- TLSH
  T171E2E0DDE729C4A5E63D127C453922DD2BA2ED7246E113D58364B1724CAD2FCECA10CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral17 behavioral18
- Target
  assets/minecraft/sounds/mob/creeper/say4.ogg
- Size 12KB
- SHA256 46547d38192de39582c0e0d4983376f4a1621b2f8bd14c1807402b93945734d3
- MD5 acc73d485fafabd2ec944ffcb160dfa0
- SHA1 5f3031e2e4c235a95d4364cec55e4f0fd3024df0
- SHA512 8796cd9a893a28b1da661aa881c17ac2ca2d1f206639edc6c752ba9fcaaeff28010d78240f6d36b913bb3ded095d86bc021dbc852d84fe2096cc0b9108f844f8
- SSDEEP 192:gttxOIOWOKxCPs4OLgmICGrgV33BrJaU+dV58UUW8Ouw0++YA1Y+VlEaQOD++:gtDzCPEIZgb+b58UgL1fE+EaTD++
- TLSH
  T18942AEEBC43ECF96DD2269B6353986D613B8B130676007E7EB7112DD8E75A00A8D0465
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral19 behavioral20
- Target
  assets/minecraft/textures/block/head_creeper.png
- Size 63KB
- SHA256 d77bd85658474e6d5e3eb3a84168fd1ae6da28be019e9a82a114b8a8a30a15a7
- MD5 f8067cb71adecd0274b107717f316624
- SHA1 eaf3d6b80154dac5c5ec72c0e259b39111da1434
- SHA512 592df8f3664e56017339fb0f18061980f452cbc4de002b4bdcfde0930ac42e4fc0c2c1758fd973e5b084ff2e4ba586a621b0b7884a29a9ad98c3c4243303f2d8
- SSDEEP 1536:Hm5fFm+kIqBxWZM0Mhvh/muo34+naetXxmdaaRRFr2MQMPYq9:Hm5o+kIqxWZMVh/GFnae9xml2PMp9
- TLSH
  T1A753E1E19314C574B9A500E1D85A4D80BEF912CA66FF0A60EE7FAE1674E330C16D8F0B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  assets/minecraft/textures/entity/creeper/creeper.png
- Size 63KB
- SHA256 d77bd85658474e6d5e3eb3a84168fd1ae6da28be019e9a82a114b8a8a30a15a7
- MD5 f8067cb71adecd0274b107717f316624
- SHA1 eaf3d6b80154dac5c5ec72c0e259b39111da1434
- SHA512 592df8f3664e56017339fb0f18061980f452cbc4de002b4bdcfde0930ac42e4fc0c2c1758fd973e5b084ff2e4ba586a621b0b7884a29a9ad98c3c4243303f2d8
- SSDEEP 1536:Hm5fFm+kIqBxWZM0Mhvh/muo34+naetXxmdaaRRFr2MQMPYq9:Hm5o+kIqxWZMVh/GFnae9xml2PMp9
- TLSH
  T1A753E1E19314C574B9A500E1D85A4D80BEF912CA66FF0A60EE7FAE1674E330C16D8F0B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral23 behavioral24
- Target
  assets/minecraft/textures/entity/creeper/creeper_charge.png
- Size 1KB
- SHA256 2e923e907ec46f3fc38edad20992afd544e0f057dfc7b6e6ac24e21798ad8c31
- MD5 25d96ea26c764253725e574d44af27a0
- SHA1 ad6d9d731aac41bf5ffe2dc1d3ea717f786223ec
- SHA512 9cb9d5a11be0862254454b9f271a87c1ea2626e96ac6d7a17ea7ebe810df855ba0e476bda8d548cecda947d6e577a7927e3568db5cdebed291c163f56e179f21
- TLSH
  T199310B92F3DE4125B3CA30319BD5355FB6E9417C4A55686C85DA2889C062F15B06ABC0
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  pack.mcmeta
- Size 200B
- SHA256 de065d8c3bb183cee79b5fbaf72603a38980af51ba31ffb012bcbf02455428e6
- MD5 2a26e64313d1d0deb3798ae17c7b8dd5
- SHA1 0a508cb284b75a2421eac082ab1ec1182eca0fb5
- SHA512 3803bcde58c57dea27d409ca4828d4b47843e695e6af65177747cfb11576c287500a6094e4420b227dfbc69c2137f5ea43abd7957d90b6b27cba2a4852f020dd
- TLSH
  T1CAD02276FA10AE7361F00372A87E4343FF5DA63710A8C58AF9A1084D1E21EE492D7F02
- MD5 SHA1 SHA512 TLSH
Score

8^/10

execution adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral27 behavioral28
- Target
  pack.png
- Size 120KB
- SHA256 0cbf45e818fb996cb42c8f099ea836a50b6f5b70413f50c246a9a26cc6329ef4
- MD5 f3099672bcf162233b0b86a26174200f
- SHA1 ed43547d660675760aba8d1df1c6695baaa11e2c
- SHA512 0431cc1411d90bb55debf4a354dfc193a2f67df7157264fcbdb7d15a764c134faec0ebaabaa7a87190d14f55dd2aa4b830e9f93379a03e05d0f901006d4b82b5
- SSDEEP 1536:Gq19VqaKyrmn+rrwsFt53EB8Hab3BLqYZTOGnh0XApOjnoF9HFa7nKI6ouDnqk/m:9jKyrG+rE1C6btTRnt0nKADKI6o+3OQ+
- TLSH
  T1CBC312A3DF2A47C3155A74158107B36992B6DB8F6DE654C029187330E6D2AB38D33A8F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30