Analysis
- max time kernel
13s - max time network
66s - platform
windows10_x64 - resource
win10v20201028 - submitted
31/03/2021, 09:29
Static task
static1
Behavioral task
behavioral1
Sample
Pago 31 Mar 2021 at 2.15PP3343PDF.jar
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Pago 31 Mar 2021 at 2.15PP3343PDF.jar
Resource
win10v20201028
0 signatures
0 seconds
General
- Target Pago 31 Mar 2021 at 2.15PP3343PDF.jar
- Size 100KB
- Sample210331-psygly9kba
- SHA256 1cfba0ba32dbe3bb0b14a95da032d6cda94eaa5c65135973eea16d12e07e5b58
- MD5 efff05f2e8302a3801b7b4cedbcf2cba
- SHA1 234c8984e545d77ac64c30898ca3d6bf227f24fa
- SHA512 989d3169a12afdc5af695674e7c45ae45cde59c01075c8b9927cbb2f3efc36aec1089b5c66b96b38133c5cdb5b6504b90dd7c9dd4326667ef3ea54364c6303eb
- MD5 SHA1 SHA512
Score
4/10
Malware Config
Signatures
- Drops file in Program Files directory 12 IoCs
description ioc Process File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\ntdll.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\dll\ntdll.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\symbols\dll\ntdll.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\ntdll.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\jvm.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\symbols\dll\jvm.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\dll\jvm.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\symbols\dll\jvm.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\dll\jvm.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\jvm.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\dll\ntdll.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\symbols\dll\ntdll.pdb java.exe