Analysis

  • max time kernel
    125s
  • max time network
    150s
  • platform
    windows10_x64
  • resource
    win10-en-20211208
  • submitted
    13/12/2021, 15:18

General

  • Target

    SHIPMENT_DOCUMENTS_INV-PLIST_BL PDF.jar

  • Size

    95KB

  • MD5

    b1467334c88785074a65f4a908a98852

  • SHA1

    f03287324b6a6d87458802faf8626a8b37f7ea76

  • SHA256

    1ad5d9e88b0356a59d02aa52ddbb663719b46085e3075e7f171c609083a09db0

  • SHA512

    9edcb83f6dd786cc5680d82feead098b77da16096d63fe59c21ca3f280e67037c15ef380624f29f6ce46497a1c8d1a3931e28c2d430d2ae7f92856ed3a53229e

Score
4/10

Malware Config

Signatures

  • Drops file in Program Files directory 12 IoCs

Processes

  • C:\ProgramData\Oracle\Java\javapath\java.exe
    java -jar "C:\Users\Admin\AppData\Local\Temp\SHIPMENT_DOCUMENTS_INV-PLIST_BL PDF.jar"
    1⤵
    • Drops file in Program Files directory
    PID:3440

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/3440-118-0x0000000002920000-0x0000000002B90000-memory.dmp

          Filesize

          2.4MB

        • memory/3440-119-0x0000000002920000-0x0000000002B90000-memory.dmp

          Filesize

          2.4MB

        • memory/3440-120-0x0000000000860000-0x0000000000861000-memory.dmp

          Filesize

          4KB

        • memory/3440-123-0x0000000000860000-0x0000000000861000-memory.dmp

          Filesize

          4KB

        • memory/3440-125-0x0000000002BA0000-0x0000000002BB0000-memory.dmp

          Filesize

          64KB

        • memory/3440-126-0x0000000002BB0000-0x0000000002BC0000-memory.dmp

          Filesize

          64KB

        • memory/3440-124-0x0000000002B90000-0x0000000002BA0000-memory.dmp

          Filesize

          64KB

        • memory/3440-128-0x0000000000860000-0x0000000000861000-memory.dmp

          Filesize

          4KB

        • memory/3440-129-0x0000000002BC0000-0x0000000002BD0000-memory.dmp

          Filesize

          64KB

        • memory/3440-130-0x0000000002BD0000-0x0000000002BE0000-memory.dmp

          Filesize

          64KB

        • memory/3440-131-0x0000000000860000-0x0000000000861000-memory.dmp

          Filesize

          4KB

        • memory/3440-137-0x0000000002BE0000-0x0000000002BF0000-memory.dmp

          Filesize

          64KB

        • memory/3440-139-0x0000000002C00000-0x0000000002C10000-memory.dmp

          Filesize

          64KB

        • memory/3440-138-0x0000000002BF0000-0x0000000002C00000-memory.dmp

          Filesize

          64KB

        • memory/3440-141-0x0000000002C20000-0x0000000002C30000-memory.dmp

          Filesize

          64KB

        • memory/3440-140-0x0000000002C10000-0x0000000002C20000-memory.dmp

          Filesize

          64KB

        • memory/3440-142-0x0000000002C30000-0x0000000002C40000-memory.dmp

          Filesize

          64KB

        • memory/3440-145-0x0000000002C40000-0x0000000002C50000-memory.dmp

          Filesize

          64KB

        • memory/3440-149-0x0000000002C50000-0x0000000002C60000-memory.dmp

          Filesize

          64KB

        • memory/3440-148-0x0000000000860000-0x0000000000861000-memory.dmp

          Filesize

          4KB

        • memory/3440-150-0x0000000002C60000-0x0000000002C70000-memory.dmp

          Filesize

          64KB

        • memory/3440-153-0x0000000002C70000-0x0000000002C80000-memory.dmp

          Filesize

          64KB

        • memory/3440-156-0x0000000002C80000-0x0000000002C90000-memory.dmp

          Filesize

          64KB

        • memory/3440-167-0x0000000000860000-0x0000000000861000-memory.dmp

          Filesize

          4KB

        • memory/3440-169-0x0000000000860000-0x0000000000861000-memory.dmp

          Filesize

          4KB

        • memory/3440-174-0x0000000000860000-0x0000000000861000-memory.dmp

          Filesize

          4KB

        • memory/3440-180-0x0000000000860000-0x0000000000861000-memory.dmp

          Filesize

          4KB

        • memory/3440-193-0x0000000002CA0000-0x0000000002CB0000-memory.dmp

          Filesize

          64KB

        • memory/3440-192-0x0000000002C90000-0x0000000002CA0000-memory.dmp

          Filesize

          64KB

        • memory/3440-200-0x0000000000860000-0x0000000000861000-memory.dmp

          Filesize

          4KB

        • memory/3440-212-0x0000000002CB0000-0x0000000002CC0000-memory.dmp

          Filesize

          64KB

        • memory/3440-222-0x0000000002CC0000-0x0000000002CD0000-memory.dmp

          Filesize

          64KB