General

  • Target

    Spec-0059.jar

  • Size

    12KB

  • Sample

    200630-ha4p51z6k6

  • MD5

    0006baec6fa6ca7b492c84797dc0f0d0

  • SHA1

    b1ebdc48f35043807668633c12fb43890ad8f08c

  • SHA256

    c9ab7ef84ff8d0d6b35290ec1f0ce734f47c6b6ca46707c76356cab766a0f873

  • SHA512

    a24f41dab1a122a279b459c0db5e28c59d0c0f6dc73ce6238f5343cf38ac210fe45b2a705f9abd40d882da5e14a1051a010a17a98cddea24a20a11cdfe77f03f

Score
8/10

Malware Config

Targets

    • Target

      Spec-0059.jar

    • Size

      12KB

    • MD5

      0006baec6fa6ca7b492c84797dc0f0d0

    • SHA1

      b1ebdc48f35043807668633c12fb43890ad8f08c

    • SHA256

      c9ab7ef84ff8d0d6b35290ec1f0ce734f47c6b6ca46707c76356cab766a0f873

    • SHA512

      a24f41dab1a122a279b459c0db5e28c59d0c0f6dc73ce6238f5343cf38ac210fe45b2a705f9abd40d882da5e14a1051a010a17a98cddea24a20a11cdfe77f03f

    Score
    8/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run entry to start application

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Registry Run Keys / Startup Folder

1
T1060

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks