926fec40a324fdf3ff492db6a3c154fc524d0cc059197b6eaaa88c2d3df3811b

Analysis

Target

invoice_pdf.jar
Size

5KB
MD5

37f5e9c66a090ac8ca354ad4574108ac
SHA1

84f29ff28d4d1f04b1a05c920718356588d49404
SHA256

18382afed4a3eb374fa6a2d5a564d881204f631279903a445fe2d19c8f1da897
SHA512

eb4faaaf782021cf70279e787642588bbf3bbe18d239b54558bbababa0b89eb8dce4b6cf96db9b6c1f7e347ed28bad189ccf51120f3f3335f6df8d9391da60b4

Score

4^/10

Drops file in Program Files directory 12 IoCs

Processes:

java.exe

description	ioc	process
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\jvm.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\symbols\dll\jvm.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\server\ntdll.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\symbols\dll\ntdll.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\server\dll\jvm.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\server\symbols\dll\jvm.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\dll\jvm.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\server\dll\ntdll.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\server\symbols\dll\ntdll.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\ntdll.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\dll\ntdll.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\server\jvm.pdb	java.exe

C:\ProgramData\Oracle\Java\javapath\java.exe
java -jar C:\Users\Admin\AppData\Local\Temp\invoice_pdf.jar
1⤵
- Drops file in Program Files directory
PID:5028

memory/5028-132-0x0000000002DD0000-0x0000000003DD0000-memory.dmp

Filesize
16.0MB

Download
memory/5028-144-0x0000000002DD0000-0x0000000003DD0000-memory.dmp

Filesize
16.0MB

Download
memory/5028-145-0x0000000002DD0000-0x0000000003DD0000-memory.dmp

Filesize
16.0MB

Download
memory/5028-148-0x0000000002DD0000-0x0000000003DD0000-memory.dmp

Filesize
16.0MB

Download
memory/5028-151-0x0000000002DD0000-0x0000000003DD0000-memory.dmp

Filesize
16.0MB

Download
memory/5028-152-0x0000000002DD0000-0x0000000003DD0000-memory.dmp

Filesize
16.0MB

Download
memory/5028-153-0x0000000002DD0000-0x0000000003DD0000-memory.dmp

Filesize
16.0MB

Download
memory/5028-156-0x0000000002DD0000-0x0000000003DD0000-memory.dmp

Filesize
16.0MB

Download
memory/5028-160-0x0000000002DD0000-0x0000000003DD0000-memory.dmp

Filesize
16.0MB

Download
memory/5028-161-0x0000000002DD0000-0x0000000003DD0000-memory.dmp

Filesize
16.0MB

Download