4c3393a004c14da2adfe8fe2d70c11dd6d4cf7a7b656bc28a7d2acc49e0cb132

Sharing

Copy URL Twitter E-mail

General

Target
kingmc-addon.zip
Size 51KB
Sample261030-cac3aahz2r
SHA256 4c3393a004c14da2adfe8fe2d70c11dd6d4cf7a7b656bc28a7d2acc49e0cb132
MD5 e4ee75e39e7f41ca9b73642932c84072
SHA1 dea3d0490c42c8c67ff668edf33e29ed2bbcab07
SHA512 d54217d45d2fafc98cdc6a182bd17506f5947a948d4d5af8c5b3d2e0ae31ebeaf3495bd0449cf2209e7e0425298bef2e45b288d00c11679a7707bc1ccf19c5b6
SSDEEP 1536:SprjXbNqxFRZgBIyaL+PwXbE95P0Y6XMNSz/e2sT4YlPHG:4rjXbMxNg5N/SX
TLSH
T1BE33D0A5D6FBC433ED62C7FCF370870209D0347E52B269EB5A58560AD8835D01E5D8A7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

execution linux

Malware Config

Targets

- Target
  kingmc-addon/gradle.properties
- Size 101B
- SHA256 7f1da475d72e68a5735930b1d47d211434caf3644e6defede937f512c452d64e
- MD5 8b16a33e769c7a2cdbb7824dd2080622
- SHA1 0992a3428a4cba992df515898b2a7310877a462d
- SHA512 312af43821561ea92421de02075b2a16be36c74ed3123fd3166a42681efdbdba629239673847d7687430e5d2927cb58afc8335d1860389a4f20bc9f82b9673cc
- TLSH
  T11AB012A40035313044161EBFD4F803701877D57C018C32FD15C9030D23547885B10120
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral1 behavioral2 behavioral3 behavioral4
- Target
  kingmc-addon/gradle/wrapper/gradle-wrapper.jar
- Size 46KB
- SHA256 2b2e2cee3d8a8e5379b4f1c5902419404e83c1dba5ff55192ad5986e3f44cd6e
- MD5 25d548367167eac3a51b81ab438ce18c
- SHA1 1348673e823d5421f6bb51bd578d7e560ac0d53a
- SHA512 6297bbcac0cd62acfbc2afb3bbbf5bc88e2aef409171508c9328dd07003a35482b19a21485f656359006163660da178557b3aff37ea0945945c4f538ff269826
- SSDEEP 768:u5xfVxGwpFjXDsA8zTphmjB9vT1a8w18E7SkMwKmIqoezzzR87S5U6f+v:mxfiqApcFtTc18wSkMyI8zz1Bedv
- TLSH
  T14B239D566DA4A629C082053F90A7C705A331D35E898CEA2F1EB5230DEFD4A8F571379F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral5 behavioral6
- Target
  kingmc-addon/gradlew
- Size 101B
- SHA256 7f1da475d72e68a5735930b1d47d211434caf3644e6defede937f512c452d64e
- MD5 8b16a33e769c7a2cdbb7824dd2080622
- SHA1 0992a3428a4cba992df515898b2a7310877a462d
- SHA512 312af43821561ea92421de02075b2a16be36c74ed3123fd3166a42681efdbdba629239673847d7687430e5d2927cb58afc8335d1860389a4f20bc9f82b9673cc
- TLSH
  T11AB012A40035313044161EBFD4F803701877D57C018C32FD15C9030D23547885B10120
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral10 behavioral7 behavioral8 behavioral9
- Target
  kingmc-addon/gradlew.bat
- Size 94B
- SHA256 1d04a28bed3da9617210622addf7ab20390fbd4eca0729a6867a4c9a5d95a2dd
- MD5 4701b8863619e4a047ec9200288215b4
- SHA1 71d7f5b569baad853c690815af1f63a01ad84c61
- SHA512 1e3926c086aac9ed6f6bb137af1269d7b53c139b43ac340fa8528daddf4a8ebef113997fa293a5913d3b7c0ee897926d33cfb3b80a76d58f320c94b3447edbc9
- TLSH
  T1B5B012E04038311040121E3FD0F802B0183ED53D000C71FD15CB030C03847C44300421
- MD5 SHA1 SHA512 TLSH
Score

7^/10

execution
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral11 behavioral12

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Enumerates connected drives

Loads dropped DLL

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12