Overview

overview

6

Static

static

6

dqrkisclie...11.jar

windows10-2004-x64

1

dqrkisclie...11.jar

windows11-ltsc_2024-x64

1

Analysis

  • custom tags

    obfuscatorjavaskidfuscator

Sharing

Copy URL Twitter E-mail

General

  • Target
    dqrkisclient-1.21.11.jar
  • Size 2.1MB
  • Sample261102-w12ccaga84
  • SHA256 bc0ac7a96e041e16cd6c802d292acff3c0c6ddaa17998d0979807e3fd0ea2ad4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
obfuscatorjavaskidfuscator

Malware Config

Signatures

  • Skidfuscator Java obfuscator (braille watermark / hardcoded decryptor name) 1 IoCs

    Skidfuscator injects a private static String[] field literally named 'nothing_to_see_here' filled with braille-art strings (its 'Ahegao' watermark), a byte-array string decryptor with the hardcoded method name 'thisIsAInsaneEncryptionMethod' (renamed to random 15-char lowercase names in v3 builds, w

    obfuscatorjavaskidfuscator
  • Unsigned JAR 1 IoCs

    Checks for missing JAR codesign signature.

File Explorer

  • dqrkisclient-1.21.11.jar
    .jar 2.1MB

dqrkisclient-1.21.11.jar

  • SHA256 bc0ac7a96e041e16cd6c802d292acff3c0c6ddaa17998d0979807e3fd0ea2ad4
  • MD5 SHA1 SHA512 SSDEEP TLSH

  • Skidfuscator Java obfuscator (braille watermark / hardcoded decryptor name)

    Skidfuscator injects a private static String[] field literally named 'nothing_to_see_here' filled with braille-art strings (its 'Ahegao' watermark), a byte-array string decryptor with the hardcoded method name 'thisIsAInsaneEncryptionMethod' (renamed to random 15-char lowercase names in v3 builds, w

    obfuscatorjavaskidfuscator

  • Unsigned JAR

    Checks for missing JAR codesign signature.