Analysis
-
max time kernel
121s -
max time network
137s -
platform
windows10_x64 -
resource
win10-en-20211208 -
submitted
18/12/2021, 08:50
Static task
static1
Behavioral task
behavioral1
Sample
SHIPPING DOCUMENTS_00298761 PDF.jar
Resource
win7-en-20211208
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
SHIPPING DOCUMENTS_00298761 PDF.jar
Resource
win10-en-20211208
0 signatures
0 seconds
General
-
Target
SHIPPING DOCUMENTS_00298761 PDF.jar
-
Size
95KB
-
MD5
94c7b2d865bde2640f25675a1c4f6505
-
SHA1
9d535b02ae1babcf0a0f15c2925b4b8a0ba02ba9
-
SHA256
dd3b94cbb244bf2e3ee0154ad78e2d352af3fd95a976abe5f5f3f2d4d630a873
-
SHA512
36250bb4633e68d08d62c452a73ace0255705fc4c2a2b7e1252a69033293e4b58028df7bde4191ecccfe33651fff8c79d8ce833b75cfb1bbf7180b68f6f590fe
Score
4/10
Malware Config
Signatures
-
Drops file in Program Files directory 12 IoCs
description ioc Process File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\symbols\dll\jvm.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\dll\ntdll.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\symbols\dll\ntdll.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\dll\ntdll.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\symbols\dll\jvm.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\dll\jvm.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\jvm.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\ntdll.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\ntdll.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\symbols\dll\ntdll.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\jvm.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\dll\jvm.pdb java.exe