a7467e03097fb1c6f8ae8b138335b3ea412e6837ee0803d44935b571671b1aa3 | Triage™

Analysis

max time kernel
117s
max time network
125s
platform
windows10_x64
resource
win10-en-20211208
submitted
21/01/2022, 16:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
e-transfer.jar
Size 177KB
Sample220121-vdd3vsacf4
SHA256 a7467e03097fb1c6f8ae8b138335b3ea412e6837ee0803d44935b571671b1aa3
MD5 ae4d8bf6b2cb97eeedc8370753a8d1fe
SHA1 af72d0671739b2167547bd95ac18df598cd58ae2
SHA512 693c27c4b38c92fda9594a05604645123ab74207f4c7e0a5a3ecd5477f90c7fae781da76aaacc6549fc6ca88f83bcbd0eb8a6d37f40ede28f1254aa12f68a5a3
MD5 SHA1 SHA512

Score

4^/10

Malware Config

Signatures

Drops file in Program Files directory 12 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\server\symbols\dll\ntdll.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\ntdll.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\jvm.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\server\dll\jvm.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\server\symbols\dll\jvm.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\dll\jvm.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\symbols\dll\jvm.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\server\ntdll.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\server\dll\ntdll.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\dll\ntdll.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\server\jvm.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\symbols\dll\ntdll.pdb	java.exe

C:\ProgramData\Oracle\Java\javapath\java.exe
java -jar C:\Users\Admin\AppData\Local\Temp\e-transfer.jar
1⤵
- Drops file in Program Files directory
PID:3144

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3144-116-0x0000000002B40000-0x0000000011C40000-memory.dmp

Download

memory/3144-117-0x0000000000B50000-0x0000000000B51000-memory.dmp

Download