ebba9a86356667bde4680ba8f897416e7d263de21e5a4066dc74713b44297c59

Sharing

Copy URL Twitter E-mail

General

Target
javser_win_1.0.2.zip
Size 79.1MB
Sample261107-pgb5saeg82
SHA256 ebba9a86356667bde4680ba8f897416e7d263de21e5a4066dc74713b44297c59
MD5 639b0ed0f4f024a5e10cd821b1bb2ca8
SHA1 c2e762be5de18013d6a841122fd5f898e810c0ea
SHA512 3cfd5a9241f54bdba8d5b0b6f59585764f0c8e1892959e187bea31021131a14eb5ffe485e78daed57e407947ce3b8ac61ded02acb86279af3d8ae75e53c97b76
SSDEEP 1572864:k3BFyKw/fXHEXzBcipQFMDkxFjPi3tqj0aAbYGRHWi70nPhl24OWOjw2xl:kxFyK2fX4zBtpQFMDknji36AbRZ4hl9I
TLSH
T117083382A8F6DC4BEC76F1B544E5E38E9F0B9428D9058EF1D794024207DA7E062E375B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Targets

- Target
  JAVser.exe
- Size 475KB
- SHA256 40933557efc19ff59a8c2bfb20e65f2aef3c89ebb9753e5ecdf5b3ad3e3c2f73
- MD5 b8b564a95e7dafe174e5382feb540bb9
- SHA1 09e2c2138c04df05b84dac714ccaa2e308c7478d
- SHA512 b1e6d647868c78a58a87fa7db45a799c511e26932dff236cfb4eb5aa5a09b6fea6a46018d461c228759d14197b7c20669a7a6cd3775ebfd231c4470012ec62d9
- SSDEEP 12288:uNGIVpZAC8rkNi66LqtDZTmryobTf8EEa:gGmQ5LqtDZZUvR
- TLSH
  T183A48D1A636804F9E0B7D278C9435902E6B5781A4371EB9F03E8D6762F236D09E7EF11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral1 behavioral2
- Target
  app/animation-core-desktop-1.11.1-3ec8687bba1c875f4630e7c99d49defc.jar
- Size 380KB
- SHA256 1b3af8d20627b01101d827f72e26dbadccc8d212c0ffc0c02ff2a6fc967a6ca8
- MD5 3ec8687bba1c875f4630e7c99d49defc
- SHA1 1bf633ecd1a38a1cf7a41630bc56cba0da9cc25b
- SHA512 2b3e5b13c763a3b44c2f56ea7901c149119f0698fa248fc2c07a6015824a26ca78df368b639a21f9f2cf641ca233c657c0ed8897bbf7dde7eddfc796a1bacb20
- SSDEEP 6144:cu2t0TXKWKCt4aRDjOFEwvJvaLcetVoE71FNGSF5AJHyh8mHCZaXcdcfSKQP5aO3:r2t0TjKCXXqJI5PDWSF5AJSh8mHCZaXi
- TLSH
  T16184D0B029C48111C67FD372A25C0052FC394AB8D967693E3964069AE7D6A0B477BFF3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  app/animation-desktop-1.11.1-3b1636eba8fac16d053e567d9b91df8.jar
- Size 403KB
- SHA256 bb41c6c550a471c68c51185c3bb0458482a4e803ee074bf215adc8832e2007e1
- MD5 3b01636eba8fac16d053e567d9b91df8
- SHA1 f873fb28f1a08d45a4dd20a0130b3da8cadf383c
- SHA512 7da6126cdf28e7319aaf99891cece708662422d0927211edba38ca2e250566100c5343e61d2ec7b5348fff523b23507d2e1708d2b222605009621ead9341b845
- SSDEEP 12288:CvquJF+oNpe4YKOJzsJBUgfcyxSX032rg:KFJF+oYKJUgJYX0mrg
- TLSH
  T1BC94F17225C18160CB3B9332626910A2BC3509F8606B192E367505EBA3FF95B57B3BF5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  app/annotation-jvm-1.10.0-115b24fa6dc2fbca9edd40aadbce03e.jar
- Size 60KB
- SHA256 ddd072ddbb553178e205517ce777b2f05aa9e412982d9ecb4eedc74f1212f697
- MD5 115b24fa6dc2fbca9edd40aadb0ce03e
- SHA1 388cfaa79001d0f024d28f6a13d5a3dfc2f0e18f
- SHA512 07c3d87a7643270cf9279ad0c9526947b5e8ab8f92360c2d5441645de4a004b73420b7e223ce4c226fcc8a1377d357d6fc45f10f285b21742b417e0d60f20798
- SSDEEP 768:IYlAUOTbW5nc7UkYd6iBxf2IRojqPVCU5ojn8Uq839QUn352Q:IYlAJycoh00xfpSZmoz8G39QUJ2Q
- TLSH
  T18F537CBE7BC88470DD3FE1B271691862FD2A26DC9029922730B60587F4F542567FBD82
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  app/annotations-23.0.0-8484cd17d040d837983323f760b2c660.jar
- Size 28KB
- SHA256 7b0f19724082cbfcbc66e5abea2b9bc92cf08a1ea11e191933ed43801eb3cd05
- MD5 8484cd17d040d837983323f760b2c660
- SHA1 8cc20c07506ec18e0834947b84a864bfc094484e
- SHA512 cb82eb0aaae88e3283b299929173296e30c7b078105e0fc5ecfbcd4eb230026f9a7cc46680832d036e6c1ff036ad99d4c50dc296d4919d223879081ac1616944
- SSDEEP 384:jHDe0/WMt9iLf69hMoNTYbyuGXoPhsPmSBfGYsnr:jiMtcf6MgPXiYsr
- TLSH
  T18AD2D9EED7405335E92F9137B0A25816743EB0C970C13302EBFA46C6A5758266F9BF86
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  app/atomicfu-jvm-0.28.0-70921245a0aed3c3e3d17c34ca3dbd87.jar
- Size 47KB
- SHA256 39576ec46b83412ff7a2909d24cccbba90400e91f9aa67b250309bc0872ecf52
- MD5 70921245a0aed3c3e3d17c34ca3dbd87
- SHA1 6a9ac536f4b2144e57c176fd4e26821eb12084f4
- SHA512 222e76c73577cd301aa7cd736609687cf7fa8340680a00cc5c15370834370c7884998b1b92f39dada0256d4ff521adce86b6813c61c70586c1e70e503e5491b0
- SSDEEP 768:L1qIGDYW987A9POMs1mUXuZXQ7yv23KkBT8TlooCfMeEvh88wSelEkKwhGa7Wy:L1RGDYW987kYduZXIymKHTlLCVlEhwN/
- TLSH
  T1B123AF5C12FD88B9E4B786F580511C3BE96B25CDC1C32613DEA718D211FFA5E53A2386
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  app/cloudy-desktop-faacf81ca36d8278e169a43df2b22c.jar
- Size 439KB
- SHA256 2b2e5c30d07945ee6d521cc91da80062e5617b47c3aac4c8bc0d82fc1f294240
- MD5 faacf81c0a36d8278e169a43df2b220c
- SHA1 107aa519b3d7b6abeda66cb8f4a01d445880f78e
- SHA512 2a1c5c795a082275872717c41652f80171f43de18ae87621f0b7060868c087078e65d6e5924d26be1a4d8cb3d3b6698a1457fba23b52443b9001b06952cbe747
- SSDEEP 6144:mFtFhzzAtTf2nSSHWzbPNQkrmHKWLhQrY55qzFSHl8XwN52JNs74wncwaZESwm:85QInbClrmHKWLSYiQy0264w2d
- TLSH
  T186A4E03360CEDF2BE833C93AC92456A2695B44EDB046647736F50B97A4E2CF6C325784
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  app/coil-compose-core-jvm-3.5.0-9565c4af0fad861b0bc16b7bffc53.jar
- Size 138KB
- SHA256 38d80e53cd9dcda1fa84470bd3aa7a6080451b6cc52b03c9dffa22570b7f0e3b
- MD5 95065c4af0fad861b0bc160b7bff0c53
- SHA1 8ebdd416d1157820ca47dc6a7644c56716a9c8fa
- SHA512 90e53091da54ca7aaa94c6661e536c9e50bbd85decfc6d388fd161bdf5d99800d91895728bc6a1fd63b09bd84a396486824a44bb8e1e4278e71e86540c75c26a
- SSDEEP 3072:feLFW3kiQKWeMTGZmgH8EhlL5LJ0O9NIi1UmWyGj3kuogX:2NHT6rhttuXi1ky+k1G
- TLSH
  T123D3E077A758C8A4C133F33353A55822BD2BD7E9D80B2267065827B207E7A8D578D3E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  app/coil-compose-jvm-3.5.0-c0c057f9ba1311897cfbada05f910fb.jar
- Size 14KB
- SHA256 ec78dd5eaa0c4326b197880e5e7a44c31b0e6daa6cd2b8636ca7e1c032ce3567
- MD5 c0c057f9ba1311897cfbada005f910fb
- SHA1 820523ee39decd98eecdb61a7fc03412eedbbabc
- SHA512 f75984a30d8b1aadabb843787315e8ad5464e3054864ea30009e327dfa72bd1014c9544d27be9c00df74469486993afad29ae852c9680995ceb3ac2374cb317b
- SSDEEP 384:nMGOgmCI5IvpVNLkgrTb81qyeR/RW7EjUOnb45IPej66HnC:n7OEMujr81demXO3HcC
- TLSH
  T11F52BF723BA88DA6D937F37A838358BABD1BC71D5417F10A5510337427A728CD2826E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  app/coil-core-jvm-3.5.0-73da9d924cacaf672c3cc0d09340dfa.jar
- Size 341KB
- SHA256 479311df567a435d88aef4fabbec04585556770e7881d86c1758b07d5b126f40
- MD5 73da9d924cacaf672c3cc0d09340df0a
- SHA1 5e82ee4827a88516057cb4ebd22871f6672643a8
- SHA512 3a9ac7f04d0a47e7ae130a120f86c9315a942b934acf032d7729ab6840dc92c41729e7532a73dc329320d055906feb3c31ad68eb73f862998cb1239ca5bc073a
- SSDEEP 6144:+M+muDlaTG1uVrRiW0rYikSRSlht3Ee/llriAha+Rx0zfFWp0l5MvNHOPce:lek6YRZ+rCv6glEoA7F4w5MvNuEe
- TLSH
  T1F874E07711D885A9E137B272D700D963AC1F83FCE106613768F07BAA5AF6B8D8352391
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  app/coil-jvm-3.5.0-4cd0fba134e919a7ce9b2982d8d52685.jar
- Size 5KB
- SHA256 a280d338cb22a6bdc2f7f27aca1feccc3142a67c29f5cd945bd948d5b312727c
- MD5 4cd0fba134e919a7ce9b2982d8d52685
- SHA1 602087c06fa4b1795a1572a26b174516c4d932e5
- SHA512 216d6371c89df14877e462524faf756c0d6143f349066b84a5b306989301fe16d6aa8f593c0c394865af196c1cc8079287145b2ac52a5ca7862f8bda59b1ed67
- SSDEEP 96:tSGWf/ixOEpM0ZutiswoRLhAjFQQQRQ6ElWrb6NWxCR02lqzIHF5ZzUXIQtHi:mfqrptZutpRLlD7ESOW0R02lqkTI4QtC
- TLSH
  T1CBC15C7043B8C0E6CBBAFA39CB959436ED1BE2998169C746900493E4AFC5A4C87610FC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  app/coil-network-core-jvm-3.5.0-ae9139c71aff8fac3760d889bf422572.jar
- Size 71KB
- SHA256 3eb2ea78232460c9b9ae5ebe96e3bfb3b50b2c41b39277efb4ae454ad8652d6a
- MD5 ae9139c71aff8fac3760d889bf422572
- SHA1 5a995a2262efe8e8569b40fee8ce223aaa5599d8
- SHA512 f1f7b90db6d134109886b8c9e9e4c1941d91930384c10f102e500cb944edb04d30ef76fe161351bd4fea7c1572e2a3e428d923a13ed502e07390439f56ba135f
- SSDEEP 1536:5R6joQpVGm4Y9A0fRQECuiOEcmOW3xJQtsqK64UN+0XDo9f:CXVKfpPmmOWhJ5KBDC
- TLSH
  T10A73B033A0FD51E2E137353546047A22BD1B92BC910BC8FF09B4FBA295F6A89D61D2C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  app/coil-network-ktor3-jvm-3.5.0-af8ff3d46f38f9240b7978a83b5aeb.jar
- Size 27KB
- SHA256 0fc8c7c28d7e39656111a4f4f33950e10e41c06d00a43396cfacee835a29445f
- MD5 0af8ff3d46f38f9240b7978a083b5aeb
- SHA1 d85dbeb646cf44c53a733fcb63cc82f6a6d54f16
- SHA512 d3ffc3f6a62edb2e2d5b2cd8dce7fdcc3cba468068c7925d674d981e979ace1b8997b45a7151acfb3282563ff56a2ffd13cce90c5e8a6fee01bb0912d9df8e9a
- SSDEEP 384:Vv8me/T1HASyfjE5W6nCqPjZDoXGZFCM1uSXUTb+gFy0PrFeL29Kr4:Vve/ZUIguCISXGZFCM1NkTbJyarFebc
- TLSH
  T1E5C28E3650F84BD4F03B773043807327A8174AAE5587A9BF20A8F79AC5E7E85425E3C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  app/coil-svg-jvm-3.5.0-d89592751eac64d85638c4fdea07f.jar
- Size 25KB
- SHA256 5fb53516cf083c2bdd3cf42a8be4965288965c9f6d18e877627c66805ebd2594
- MD5 d895920751eac64d85638c4fde0a007f
- SHA1 95b54c951f86b563fea685b8b9331397c9be136a
- SHA512 8dec4b81c87fee6d0bf4b5beeb04405aed90962ea6c8c779ed60b415ca97fd4272b95c13976225ae3b41df5cc391ebb04077b37888911add9846d95f1d155369
- SSDEEP 768:bgckj43Fw6JH2gvggWUMBbMko6peqfU82TU:bkjGaXgogW1quXfU8MU
- TLSH
  T1ABC2B0BA12CA97D5D47B62717242BD32ACBF83FEC89F3A5F210013A527F2541422B5D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  app/collection-jvm-1.5.0-4421442c114a4f8c8fe587cf2d668237.jar
- Size 857KB
- SHA256 70b35924e4babcdffa37d0e575ee039c56a2d97123342624c48b603233704341
- MD5 4421442c114a4f8c8fe587cf2d668237
- SHA1 7ba2c69414d46ebc2dd76598bdd0a75c54281a57
- SHA512 f880e01f84c789dcf00b01a485f4f7035a146626423975414a6d39396b08d181db20c0113efb22749beafcf54981febcb0532962acb9d57481d4fae5b66e14ce
- SSDEEP 24576:BpTJ9WnLzBjP+YA2uvKVQUqrS6yr+dXLSH5GjKR9/aGFF/1H5:bAtP+JQV9qSWXuH5+KnTFFdH5
- TLSH
  T17615127079D86A32C6BF75B4904A11F6FD7E03ECC056685334B04653F9FA84E42A7B8A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  app/config-1.4.9-c62e4875399181f2a41573ee1fb0d00.jar
- Size 290KB
- SHA256 47d13e3196c84f2a8ccd014ae563738c3da5b7406b38e03505ec0601a2f4fc37
- MD5 c62e4875399181f2a41573ee1fb0d000
- SHA1 fc87584fea1adcf5df899e58501a470329e59b52
- SHA512 d8112cb0a59dbc3e5d99bbfcff8056ba020fbae004b14557eeec90224a078f1b508555e971d38b2ce67b2ce63293b227fb62bd9cfd109166b43c620924272ff3
- SSDEEP 6144:VLyUxFsKhjdSuLY5AQr955gcJfT/Da1BpNCZ7mdU4VQA9:JjfiqQr95Z5/6VCX4Vb
- TLSH
  T1C454D1073CED9A6FC7574E32C1098126BC270794B55EF81736E439D6E42CC8A4B1AB9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32