Analysis

  • max time kernel
    122s
  • max time network
    153s
  • platform
    windows10_x64
  • resource
    win10-en-20211208
  • submitted
    08/12/2021, 15:47

General

  • Target

    mrkbajwnyr.txt.jar

  • Size

    185KB

  • MD5

    4a769959e2ee2785d32ef2161f28cd8b

  • SHA1

    e31b455b90081313e3b7405db3efe1582fe39daa

  • SHA256

    496536d34981fc4155772fe136930ef13cf16116a4df18e6261dd084fce40b21

  • SHA512

    8ef798581834a365f8a7649572c8683e9294cb950917b9c1e9b6ae60bf48b2e4d0e3be312843e398868f31835f276df24f4c5c2b6fb07b654322a8d5351815ca

Score
4/10

Malware Config

Signatures

  • Drops file in Program Files directory 12 IoCs

Processes

  • C:\ProgramData\Oracle\Java\javapath\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\mrkbajwnyr.txt.jar
    1⤵
    • Drops file in Program Files directory
    PID:3908

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/3908-115-0x0000000003320000-0x0000000003590000-memory.dmp

          Filesize

          2.4MB

        • memory/3908-116-0x0000000003320000-0x0000000003590000-memory.dmp

          Filesize

          2.4MB

        • memory/3908-117-0x0000000002E50000-0x0000000002E51000-memory.dmp

          Filesize

          4KB

        • memory/3908-119-0x0000000003590000-0x00000000035A0000-memory.dmp

          Filesize

          64KB

        • memory/3908-120-0x00000000035A0000-0x00000000035B0000-memory.dmp

          Filesize

          64KB

        • memory/3908-122-0x00000000035C0000-0x00000000035D0000-memory.dmp

          Filesize

          64KB

        • memory/3908-121-0x00000000035B0000-0x00000000035C0000-memory.dmp

          Filesize

          64KB

        • memory/3908-123-0x0000000002E50000-0x0000000002E51000-memory.dmp

          Filesize

          4KB

        • memory/3908-125-0x00000000035E0000-0x00000000035F0000-memory.dmp

          Filesize

          64KB

        • memory/3908-124-0x00000000035D0000-0x00000000035E0000-memory.dmp

          Filesize

          64KB

        • memory/3908-127-0x0000000003600000-0x0000000003610000-memory.dmp

          Filesize

          64KB

        • memory/3908-126-0x00000000035F0000-0x0000000003600000-memory.dmp

          Filesize

          64KB

        • memory/3908-129-0x0000000003620000-0x0000000003630000-memory.dmp

          Filesize

          64KB

        • memory/3908-128-0x0000000003610000-0x0000000003620000-memory.dmp

          Filesize

          64KB

        • memory/3908-130-0x0000000003630000-0x0000000003640000-memory.dmp

          Filesize

          64KB