Analysis
-
max time kernel
25s -
max time network
135s -
platform
windows10_x64 -
resource
win10v20210408 -
submitted
20-05-2021 22:48
Static task
static1
Behavioral task
behavioral1
Sample
4d8aa3ee_by_Libranalysis.jar
Resource
win7v20210410
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
4d8aa3ee_by_Libranalysis.jar
Resource
win10v20210408
windows10_x64
0 signatures
0 seconds
General
-
Target
4d8aa3ee_by_Libranalysis.jar
-
Size
98KB
-
MD5
4d8aa3ee6eea845c73b802803c179915
-
SHA1
d2b91b80f16ce4c877fa72b24408190b06c786dd
-
SHA256
50bc4d61208e8bb13762b6e47615bb0ec20ea0c7f0ec91bc1f40d59d7ae10d75
-
SHA512
ed7c505a638e86533f2de42210e9e36c21dacc6716f17d3a566215b310d548e5773839d2fc6be70709d0c574e958cc3546f0f76018c762dd02da7c1f8012c660
Score
4/10
Malware Config
Signatures
-
Drops file in Program Files directory 12 IoCs
Processes:
java.exedescription ioc process File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\dll\ntdll.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\jvm.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\dll\jvm.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\jvm.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\symbols\dll\ntdll.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\ntdll.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\symbols\dll\ntdll.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\symbols\dll\jvm.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\dll\jvm.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\symbols\dll\jvm.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\ntdll.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\dll\ntdll.pdb java.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/584-114-0x0000000002630000-0x00000000028A0000-memory.dmpFilesize
2.4MB
-
memory/584-115-0x00000000003F0000-0x00000000003F1000-memory.dmpFilesize
4KB
-
memory/584-117-0x00000000003F0000-0x00000000003F1000-memory.dmpFilesize
4KB
-
memory/584-119-0x00000000028B0000-0x00000000028C0000-memory.dmpFilesize
64KB
-
memory/584-118-0x00000000028A0000-0x00000000028B0000-memory.dmpFilesize
64KB
-
memory/584-120-0x00000000028C0000-0x00000000028D0000-memory.dmpFilesize
64KB
-
memory/584-121-0x00000000028D0000-0x00000000028E0000-memory.dmpFilesize
64KB