Analysis
-
max time kernel
121s -
max time network
157s -
platform
windows10_x64 -
resource
win10-en-20210920 -
submitted
25-10-2021 20:34
Static task
static1
Behavioral task
behavioral1
Sample
paket..jar
Resource
win7-en-20211014
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
paket..jar
Resource
win10-en-20210920
0 signatures
0 seconds
General
-
Target
paket..jar
-
Size
92KB
-
MD5
945f4e614159d3761b358d908dfddd2f
-
SHA1
fefe60fb73ceb0d828356a5e14dd92aa0472448b
-
SHA256
214243e2fbe341f26e81a4a4ac5d407893a756bbb83c40d63ca6c76e419215a4
-
SHA512
a38c0525b484330f1dc50e9007e3844d1ce5b90a6be5e832dcb58aaf3024934fd1b953bf22c03f15dd079b1f2347de1a5e9d155ee1ddea50563cc7155736fe79
Score
4/10
Malware Config
Signatures
-
Drops file in Program Files directory 12 IoCs
Processes:
java.exedescription ioc process File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\dll\ntdll.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\symbols\dll\ntdll.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\jvm.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\dll\jvm.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\jvm.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\dll\jvm.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\symbols\dll\jvm.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\dll\ntdll.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\symbols\dll\jvm.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\ntdll.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\symbols\dll\ntdll.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\ntdll.pdb java.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2804-115-0x00000000034D0000-0x0000000003740000-memory.dmpFilesize
2.4MB
-
memory/2804-116-0x00000000034D0000-0x0000000003740000-memory.dmpFilesize
2.4MB
-
memory/2804-117-0x0000000001370000-0x0000000001371000-memory.dmpFilesize
4KB
-
memory/2804-119-0x0000000003740000-0x0000000003750000-memory.dmpFilesize
64KB
-
memory/2804-121-0x0000000001370000-0x0000000001371000-memory.dmpFilesize
4KB
-
memory/2804-122-0x0000000001370000-0x0000000001371000-memory.dmpFilesize
4KB
-
memory/2804-124-0x0000000003760000-0x0000000003770000-memory.dmpFilesize
64KB
-
memory/2804-123-0x0000000003750000-0x0000000003760000-memory.dmpFilesize
64KB
-
memory/2804-125-0x0000000003770000-0x0000000003780000-memory.dmpFilesize
64KB
-
memory/2804-126-0x0000000003780000-0x0000000003790000-memory.dmpFilesize
64KB
-
memory/2804-129-0x00000000037B0000-0x00000000037C0000-memory.dmpFilesize
64KB
-
memory/2804-127-0x0000000003790000-0x00000000037A0000-memory.dmpFilesize
64KB
-
memory/2804-128-0x00000000037A0000-0x00000000037B0000-memory.dmpFilesize
64KB
-
memory/2804-130-0x00000000037C0000-0x00000000037D0000-memory.dmpFilesize
64KB
-
memory/2804-139-0x00000000037E0000-0x00000000037F0000-memory.dmpFilesize
64KB
-
memory/2804-138-0x00000000037D0000-0x00000000037E0000-memory.dmpFilesize
64KB
-
memory/2804-140-0x00000000037F0000-0x0000000003800000-memory.dmpFilesize
64KB
-
memory/2804-146-0x0000000001370000-0x0000000001371000-memory.dmpFilesize
4KB
-
memory/2804-148-0x0000000003810000-0x0000000003820000-memory.dmpFilesize
64KB
-
memory/2804-149-0x0000000003820000-0x0000000003830000-memory.dmpFilesize
64KB
-
memory/2804-147-0x0000000003800000-0x0000000003810000-memory.dmpFilesize
64KB
-
memory/2804-183-0x0000000003830000-0x0000000003840000-memory.dmpFilesize
64KB
-
memory/2804-186-0x0000000001370000-0x0000000001371000-memory.dmpFilesize
4KB
-
memory/2804-193-0x0000000003840000-0x0000000003850000-memory.dmpFilesize
64KB
-
memory/2804-194-0x0000000001370000-0x0000000001371000-memory.dmpFilesize
4KB