72dfc0748fb01379e049de9ba66f1bd4732e89c249fd01aeb56b31f020cfa183

Sharing

Copy URL Twitter E-mail

General

Target
JPTG.exe
Size 4.9MB
Sample261027-wr3h2seb99
SHA256 72dfc0748fb01379e049de9ba66f1bd4732e89c249fd01aeb56b31f020cfa183
MD5 5b75f9e489330c7551a65b988a47f275
SHA1 b2074143940b29acc1023006f9055d6d6453eb81
SHA512 d3456968f4e59f743388fe61b46e620487638a7cb187dd907a38a41128b4f02f53589bf5ca5a25f0b015b8a8b8f5c95ccef0e65026c1168ba1bb57bf722c1b79
SSDEEP 98304:JDO9XkJv1oNZ4YvIZ13oSIq+PbKrv7rniKYItNV1cxcy7aNh6EY1F7l51PmwarSz:Ja9XkoNZ4w1SMzwVX4DaNh6PlDPj0DC
TLSH
T14936330666D4E20AC4A93EF3581ABD665DD2EEAB0D8E886753F43E337331097CD0546E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  JPTG.exe
- Size 4.9MB
- SHA256 72dfc0748fb01379e049de9ba66f1bd4732e89c249fd01aeb56b31f020cfa183
- MD5 5b75f9e489330c7551a65b988a47f275
- SHA1 b2074143940b29acc1023006f9055d6d6453eb81
- SHA512 d3456968f4e59f743388fe61b46e620487638a7cb187dd907a38a41128b4f02f53589bf5ca5a25f0b015b8a8b8f5c95ccef0e65026c1168ba1bb57bf722c1b79
- SSDEEP 98304:JDO9XkJv1oNZ4YvIZ13oSIq+PbKrv7rniKYItNV1cxcy7aNh6EY1F7l51PmwarSz:Ja9XkoNZ4w1SMzwVX4DaNh6PlDPj0DC
- TLSH
  T14936330666D4E20AC4A93EF3581ABD665DD2EEAB0D8E886753F43E337331097CD0546E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral1 behavioral2
- Target
  $PLUGINSDIR/AdvSplash.dll
- Size 6KB
- SHA256 eb1ca2b3a6e564c32677d0cdc388e26b74ef686e071d7dbca44d0bfa10488feb
- MD5 13cc92f90a299f5b2b2f795d0d2e47dc
- SHA1 aa69ead8520876d232c6ed96021a4825e79f542f
- SHA512 ff4e6e6e7104568fc85ef3a3f0494a5c7822a4ceaf65c584ad534f08f9a472a8d86f0a62f1f86343c61e2540b2254714b7ea43e4b312ff13d8271ff069386fa3
- SSDEEP 96:6hNSXIcmYjkvTS6MnBNZ1BMjDfhkkEkkXstWpPwoS:JXIpzTSd1BSk/kJtWpP
- TLSH
  T137C1B837B7C216F7C35600F12916375387E9943263A1946909B3EBCAA6A185BDD34703
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/Delay.dll
- Size 7KB
- SHA256 b6691bf37f13e37bfc07d45990092fd9398f7eff8cb1bbad05e528def0307c4a
- MD5 4602d9a9ed82d646522ead08a58536a9
- SHA1 b070bad90e13e85c97bd4e530ca7958c22e36a5a
- SHA512 5ebad4e83d411799a25b1e462ac3c7683dd0c973f131eed29131af7a240f92f55e6c60b78f96388bf7c4134941353794d79ef6c91476e8def7e5c803544afec9
- SSDEEP 96:fkcYhKlqWFeJ9DekCN3jPpP4DyGE3qLNf:cXKMJRC5BfGE3qLN
- TLSH
  T15EE1D63777C242E1E44F17B2279A23B35E347A10534485BBC6ABD8921E9322BCC76B47
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
- MD5 c17103ae9072a06da581dec998343fc1
- SHA1 b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
- SHA512 d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
- SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
- TLSH
  T1CA325C5993A0C1F3D5A0823C0D973A7B1779722016B14FA3CFA35842AE196D7AC7D227
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/benioku.html
- Size 475B
- SHA256 92fe8a078a05c2d1c9dfefd53be18fb4b5fc42454372e7faa8a24af8e7fd05f8
- MD5 eca560eba71932e407fd0c04fefe31e1
- SHA1 bd9d307799eb9552713f6cdc519bfba09ad2a2cb
- SHA512 e9ce1ce5b05823dc3982fc202b9081492205ac4b9443206e4ffb137f6460b59df2e9a4b786f306bf748da91535da32f8f843a45ab5d96120ad5a01792db82162
- TLSH
  T1F7F05CE272421C46C5722534FFD2AB10957675012D482A14B476D93B38CB606CDE3787
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  $PLUGINSDIR/modern-header.bmp
- Size 16KB
- SHA256 bdebe77261641b880af30378614c0d691510ae89f671efaaff17127d534ebb58
- MD5 4b3b1c86463c5389cfbe56d72259ba01
- SHA1 ce1e25c9e79ce07d87b703548be2b4f6e1c45c6b
- SHA512 d509037f2cff535d3e32247eebb2ae11b790871377b708848b6eb989040ab308cae0488f9eeb03b8b7359934e35719ebb3dfbf4ee1fff245f865fc1810e1d9d5
- SSDEEP 192:YTun76YgL2iF8d+36eoAeGZiKxOsZesi5:YUOYgBaMZVeGZiKYsG5
- TLSH
  T15172B125384DC02AC59E993A6D4CCDF89B72BD878F649957398533AF61FC2D20AB4360
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  $PLUGINSDIR/modern-wizard.bmp
- Size 150KB
- SHA256 6508b36d8ff87b8b5f42ea4cfe5a611f4b5f17dce8bf90ecb609018f17aa3d65
- MD5 bb63d43c7ce8e571d52024276dc4731a
- SHA1 9fbd4018831f48c2c0252f3cfec109f1d0f95e41
- SHA512 3e417b761cfa254df3bcfaea42bcd25cbd07da46ff90108cf2196a90d2c41a759224e3f61c4bf0bc62b142dbcd46cfa147799e4c90172d1ffaf5e9e9c21ad794
- SSDEEP 1536:ZlLPAC/bJxoPBchYj/Qyz0P6SJHBQIDKNeSJsm3bYhh8:ZlTjbJyJD/xoDohJP3yh8
- TLSH
  T1CDE39317BF89B502F56E2A3650FE0B19B325DD642B17878B650A3374AC733C46E5228D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a
- MD5 c10e04dd4ad4277d5adc951bb331c777
- SHA1 b1e30808198a3ae6d6d1cca62df8893dc2a7ad43
- SHA512 853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e
- SSDEEP 96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420
- TLSH
  T17F12F8675A4041B3E9A3223D306A3E3F8B7C9325D0927C03C677AE566AB031A7D3A354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  $PLUGINSDIR/nsWeb.dll
- Size 8KB
- SHA256 7d4da7469d00e98f863b78caece3f2b753e26d7ce0ca9916c0802c35d7d22bcf
- MD5 84bcf3c71e70d5a6e9dc07d70466bdc3
- SHA1 31603a1afc2d767a3392d363ff61533beaa25359
- SHA512 61aefa3c22d2f66053f568a4cc3a5fc1cf9deb514213b550e5182edcecd88fadf0cb78e7a593e6d4b7261ed1238e7693f1d38170c84a68baf4943c3b9584d48e
- SSDEEP 96:9E1ZgHfHizBkiz1zCuNrwXTP8Jx/N6SCMeNV37bnwXwPML/bUdut5tCsPb2N6nOc:9E1ZkGdbiSCMeNN7LwAY/gd+Oc
- TLSH
  T13E02A233B7C348F1D50E253529AB3A3BB73AE85B17C055121F77C98A5EE2426F824352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  $PLUGINSDIR/splash.bmp
- Size 655KB
- SHA256 af99274c0daa78b4d1e9b461977e7c79f61239c545c2a75542de0a9e2a59d521
- MD5 b63727341103446936d83c7d7a1fdc7c
- SHA1 85f9f2d046c410a4257ba4ef3a077e5dfb028338
- SHA512 fdf333470c52ec6ffe62d16dcfb7d2fb6db06ba26f0969148f6b05482c9e946b292e0ef2871724024d3eee8a42c2d3234d011b6b155d21f924fd2c82cef35efb
- SSDEEP 3072:Xz8EhrqiCkj8kYQzy3h6W33yrlW6DCZIipooYN1KD:Xz8qrmkj8kYY4hUMIipooYi
- TLSH
  T157E4AE97BB48A513D92CED71C4AE4FE8E720DC039A096B57240971399CFE7F16E0538A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  $PLUGINSDIR/tg.png
- Size 13KB
- SHA256 f9c2bbafac7fff87ddf79e10f315cb4db23014e0eae31032516130844ba0f0cc
- MD5 237719368bd6bc0f9396783d1903fe97
- SHA1 07fa83d5365f4d0d00a37e6047b9400f96bcd48d
- SHA512 432a74b51b89960f0848211b34bfc7e94310dc177279b86493da684e7ca15e469dc28f4a2f1be281613a0f679a97544f1acbe2fdb413d693952ad7c0501b49a8
- SSDEEP 384:WOWOLv5q+Y7YfQLh2/arO6u5lwQ/7Q/4CPSYpNMK:W/O9Ek4uaDu5lwAVC17
- TLSH
  T15152D035EEC18E0996BDF4470876222C7308EF551A2812BF5A933B3092D7DD2F396D94
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  GameData/Pack/JP102/0.ttarch
- Size 6.5MB
- SHA256 40f0b10020fca1c810d85ff053dc1b2bd0b6fda9b2a529f74b37046302879232
- MD5 8c7480adb300395149f7643794457181
- SHA1 5ac04a4b346b516c02f06d9fc90a652499e43e7a
- SHA512 5c7595f22a2c3cb8862db30e01948c73d7524c47c1612c944c2b5d9a6caba725fa8fa66b7463ac41b1399c82d8d5dfb175ff0b7e83a6693b6569dc5db39cc18a
- SSDEEP 49152:5hkpAPDjPlaOv6QWLmp0QOpORx0rACEsXsfWklOIDc/TcPzXbu4NVqdoVuZBfjT:5ftMFkEEXbnNvVuZBf3
- TLSH
  T153661E0DFEA4D358C8669872CC31C6EAB252BECC9401AE8775CDBF6F487519F1AD4980
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  GameData/Pack/JP103/0.ttarch
- Size 6.2MB
- SHA256 75ce1e283dc813f042ae12edaba581b8be07b63e52027260f8328e4699c2c8ea
- MD5 d479b54ec10d6ab6ed356cbeb2dec692
- SHA1 6aad94bb74bae837b93374bddb2a959141f3d9ef
- SHA512 69c4b10503b43d274dd36ef6ce320af99ad64cfff14aae0ab96acd70ad8ef06bfa37f3111797c46bcea089359943f5df2a09efcf45c91793856ebc9045ee048c
- SSDEEP 49152:qhkpAPDjPlaOv6QWLmp0QOpORx0rACEKsBYQKdlOIDc/TcPzXbu4NVqdoVuZBfj:qftpBYrdEEXbnNvVuZBf
- TLSH
  T1CB66FB0DFEA4D354C8669872CC31C6EAB252BECC9405AE8771CDBF6F887518F1AD4981
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  GameData/Pack/JP104/0.ttarch
- Size 6.3MB
- SHA256 35fdf740df661b4e7a6ffe4d2f137ad29d6a46c14542a3cb57b2395b2205cf50
- MD5 e48a1184adaeb21729b0b5647cf505be
- SHA1 7fcd53ce3787def3b2aaf773288983a03c4ce67d
- SHA512 e17798affd36e683ffd6ae635172ec8c81bb999914c116c09caa105a3ceee5356ce1685be5613125fa3a0a8033b537f602637b41c9647304e8380f1d82e1886e
- SSDEEP 49152:ThkpAPDjPlaOv6QWLmp0QOpORx0rACEC+yKPBycylOIDc/TcPzXbu4NVqdoVuZBb:TftL1yEEXbnNvVuZBf
- TLSH
  T1CD660B0DFEA4D354C8669872CC31C6EAB252BECC9401AE8775CDBF6F887519F1AD4980
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  GameData/Pack/default/0.ttarch
- Size 6.4MB
- SHA256 465f3e64c1d5a1148c1653d4f6002cd2efe7961a88f45e19531f4e720d23fc5c
- MD5 feb3cff767cfda5f2fc9eeb45a68842b
- SHA1 55a48d6a81c2cce9db3b9294db8777508c993cce
- SHA512 e7b90d8c1146c142c5b6813634c7a247048eae413235ee76b806ee7b4e78e60952aed86d2f1038c2f5d81dd7b27929f98563c5489bba26c3ff43e66d0c13c1c9
- SSDEEP 49152:6hkpAPDjPlaOv6QWLmp0QOpORx0rACE5YZRMQPZlOIDc/TcPzXbu4NVqdoVuZBf0:6ftNMPZEEXbnNvVuZBf0
- TLSH
  T1BE661D0DFEA4D354C86698B2CC31C6EAB252BECC9405AE8775CDBF6F487509F1AD4980
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  benioku.html
- Size 475B
- SHA256 92fe8a078a05c2d1c9dfefd53be18fb4b5fc42454372e7faa8a24af8e7fd05f8
- MD5 eca560eba71932e407fd0c04fefe31e1
- SHA1 bd9d307799eb9552713f6cdc519bfba09ad2a2cb
- SHA512 e9ce1ce5b05823dc3982fc202b9081492205ac4b9443206e4ffb137f6460b59df2e9a4b786f306bf748da91535da32f8f843a45ab5d96120ad5a01792db82162
- TLSH
  T1F7F05CE272421C46C5722534FFD2AB10957675012D482A14B476D93B38CB606CDE3787
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32