bf1ff0648967521e35bbe6b71c7608d91d5568fcc6d98bbee73439e2bb97da44

General

Target
Adjust Binary.rar
Size 595KB
Sample261001-wpthcstfna
SHA256 bf1ff0648967521e35bbe6b71c7608d91d5568fcc6d98bbee73439e2bb97da44
MD5 35e6e9facc1a0b7333157ec0b409a46e
SHA1 023ba42008b2a6f6674b275e5ce11f83d1d6811b
SHA512 2985a9c9a47a51321aaa6389b5d2fe52452afbcafbb4c41f5b9833ab9219535d77cf35a12d472d176f550428c92b1e95a7220d8aee5801bfef3e49066e5957dd
SSDEEP 12288:1wNy81gg5KmQUUzXavtrkeO1G3Wadg56z5amGlYuQyGI44PHsH:1wNy8SUULaB68G2g5a1GCu544PHsH
TLSH
T1F6D42383D84426BB26B040A96DFF3A59BC41D154991B6D37C3E4BFF4BC4F6220AAD1E1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Malware Config

Targets

- Target
  Adjust Binary/Adjust.jar
- Size 689KB
- SHA256 2721848247230ff1d79fb6e3b431bf5b1ea1924c9023b8b9f5ed59b066e0ccda
- MD5 90fe08b9d7540a0f2a77707b731c3a96
- SHA1 1c414406229302db5a1ab9efd7bb12c4d2f0f4dc
- SHA512 76957dcfffa6b4464a1221ffb81a9bba2ab8ab8c6005001dd657e42b889be65f25feec257756e9ec8c1393bd520efca11f6b06d724b2f8ed628e6ab5a06e1a24
- SSDEEP 12288:fFKuYI+N/yqeU6J/4RZClvpVPpet0gaVIRuM141A5zeAtYB9eh:9z+N/KU6JAvC90adnkGA1+Qh
- TLSH
  T134E4CF25BF98C4E9D153B03100C04327E91C69C9E64BD89B05E41B9AADF9CCE8BB5BDD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Adjust Binary/launch.bat
- Size 115B
- SHA256 0953331a17b714fccb292ac20c402da61c7315a782506df19de0b4cacca85f22
- MD5 2c0d7bac5f83f4122aba0e9422eacce2
- SHA1 d065261f0ccafb0562e0ef71790e3f4abcde2169
- SHA512 b28fceee286e48813c97e3981e4f0f2f0d9ef09b3b8f232258241cdb84f728b11a9011d7fb8f252ddafb997896834743c925e3d444855c504b736960b4f6188b
- TLSH
  T17FB09B6EC1063A949D9D60DD395409804C74CC72C36D9F5F147452D4A7556F5C543D00
- MD5 SHA1 SHA512 TLSH
Score

7^/10

discovery execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral3 behavioral4
- Target
  Adjust Binary/launch.sh
- Size 72B
- SHA256 961a4c94751ccd8a656d1983c98a1c42c2a166b284e6a2b221e93fecd644307d
- MD5 9c506d84b5408061ba3edc3c01590bd9
- SHA1 b7882efe80a13794c0b21c9841ffaf83976fdaa2
- SHA512 c1129a7e11f47c736102d5d16bebfaf44af9a2955b88acda1e08162561baedb5e44f337b75e0405d831e5685816be59f5f73e5b4a92faa3f993424de9434285b
- TLSH
  T1A1A0223C88EA33AC0F00C032A00238B38E220CA8F808B2232000E2C300E22003802B00
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6