Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows10_x64
  • resource
    win10-en-20211208
  • submitted
    18/12/2021, 08:50

General

  • Target

    SHIPMENT_DOCUMENTS_BL_INV_PKLISTS XLS.jar

  • Size

    103KB

  • MD5

    25d7be8c2f534dca289f50a193a5418d

  • SHA1

    020aa3a275641eb88e07df1ed222f14944f80785

  • SHA256

    ad13f2f5590aa12b204c3713520f605595ab04f468577424effd742251a35712

  • SHA512

    9ccd9bf4756aa464fd9eb516448ad9f650c38ebed61f0a0eb3979b66c4f8e57f84bbc0b62c437fd56a7fc5e7c798f42a6da10f4edabf2b52e51bed970f35845e

Score
4/10

Malware Config

Signatures

  • Drops file in Program Files directory 12 IoCs

Processes

  • C:\ProgramData\Oracle\Java\javapath\java.exe
    java -jar "C:\Users\Admin\AppData\Local\Temp\SHIPMENT_DOCUMENTS_BL_INV_PKLISTS XLS.jar"
    1⤵
    • Drops file in Program Files directory
    PID:3356

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/3356-117-0x0000000002610000-0x0000000002880000-memory.dmp

          Filesize

          2.4MB

        • memory/3356-118-0x0000000002610000-0x0000000002880000-memory.dmp

          Filesize

          2.4MB

        • memory/3356-119-0x0000000000750000-0x0000000000751000-memory.dmp

          Filesize

          4KB

        • memory/3356-121-0x0000000000750000-0x0000000000751000-memory.dmp

          Filesize

          4KB

        • memory/3356-123-0x0000000002890000-0x00000000028A0000-memory.dmp

          Filesize

          64KB

        • memory/3356-122-0x0000000002880000-0x0000000002890000-memory.dmp

          Filesize

          64KB

        • memory/3356-124-0x00000000028A0000-0x00000000028B0000-memory.dmp

          Filesize

          64KB

        • memory/3356-125-0x00000000028B0000-0x00000000028C0000-memory.dmp

          Filesize

          64KB