080240f1973b889a1042beea9966c3d96f3737137397d98343594afa73620447

Analysis

Target
DHLMar 2021 at 9.708BZ290PDF.jar
Size 98KB
Sample210331-tpbw7bddh6
SHA256 080240f1973b889a1042beea9966c3d96f3737137397d98343594afa73620447
MD5 15900ee0dbafe42bcb3aa5653c27908e
SHA1 f343c4161df29df8bc3c4890881f17e9d801cec3
SHA512 5f0b482ac804a18a29f3d23a1204e9ebda9939beea1af01f4f90141cf2c6810945f04efa28d3765814b8d1c159f11c3bc4fe35a1eb3519cfa8a02d0a85237afb
MD5 SHA1 SHA512

Score

4^/10

Drops file in Program Files directory 12 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\server\jvm.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\server\symbols\dll\jvm.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\jvm.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\server\ntdll.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\ntdll.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\dll\ntdll.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\server\dll\jvm.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\dll\jvm.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\symbols\dll\jvm.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\server\dll\ntdll.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\server\symbols\dll\ntdll.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\symbols\dll\ntdll.pdb	java.exe

C:\ProgramData\Oracle\Java\javapath\java.exe
java -jar "C:\Users\Admin\AppData\Local\Temp\DHLMar 2021 at 9.708BZ290PDF.jar"
1⤵
- Drops file in Program Files directory
PID:580

memory/580-2-0x0000000002960000-0x0000000002BD0000-memory.dmp

Download

memory/580-3-0x0000000002BD0000-0x0000000002BE0000-memory.dmp

Download

memory/580-4-0x0000000002BE0000-0x0000000002BF0000-memory.dmp

Download