General
-
Target
shipment documents.jar
-
Size
101KB
-
Sample
210511-1qgjefbmhn
-
MD5
397104fac578a0ef2984ccd0483595b9
-
SHA1
f691f3345cfe94c9e0cbc115ea60d4374e1bdd9d
-
SHA256
3f8975af51c5028a28097bd0fecc58a92f083abaa347c1f3565fe0309f0286c3
-
SHA512
9821581b80896818d1d36c3cc3bb20b1ec9045d8f8ebb6aeffd57f45b17984779ac214fcb8ea49f4665287ef6237ae38ace9c211894b04bc469ace1e2ce588eb
Static task
static1
Behavioral task
behavioral1
Sample
shipment documents.jar
Resource
win7v20210408
Behavioral task
behavioral2
Sample
shipment documents.jar
Resource
win10v20210408
Malware Config
Targets
-
-
Target
shipment documents.jar
-
Size
101KB
-
MD5
397104fac578a0ef2984ccd0483595b9
-
SHA1
f691f3345cfe94c9e0cbc115ea60d4374e1bdd9d
-
SHA256
3f8975af51c5028a28097bd0fecc58a92f083abaa347c1f3565fe0309f0286c3
-
SHA512
9821581b80896818d1d36c3cc3bb20b1ec9045d8f8ebb6aeffd57f45b17984779ac214fcb8ea49f4665287ef6237ae38ace9c211894b04bc469ace1e2ce588eb
Score10/10-
Drops startup file
-
Loads dropped DLL
-
Adds Run key to start application
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-