26ef3e94ab3ffee89c80ce777dd2e17702899f5540e2fd821a707cd83de0a34d

Analysis

Target

Marina option.jar
Size

7KB
MD5

20a2ec545bc2dffc88fbd1f4aa711ecf
SHA1

3fe3e6e962d41823e3a18caf81eb53410048fa34
SHA256

2bffd93715c262a4f05edcdc45399393264366826eddbe66170117f2a13f466d
SHA512

9866be26ec26a28ff4470ba2aac7bafdae11f3bc14c605cfbef91394bce11349277e21ad8af25d83466d8b8c89a630fbfb331c2576146fa6286b49944f302be0

Score

4^/10

Drops file in Program Files directory 12 IoCs

Processes:

java.exe

description	ioc	process
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\symbols\dll\ntdll.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\server\jvm.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\server\dll\jvm.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\symbols\dll\jvm.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\server\symbols\dll\ntdll.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\ntdll.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\dll\ntdll.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\server\symbols\dll\jvm.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\jvm.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\dll\jvm.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\server\ntdll.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\server\dll\ntdll.pdb	java.exe

C:\ProgramData\Oracle\Java\javapath\java.exe
java -jar "C:\Users\Admin\AppData\Local\Temp\Marina option.jar"
1⤵
- Drops file in Program Files directory
PID:4952

memory/4952-132-0x00000000032A0000-0x00000000042A0000-memory.dmp

Filesize
16.0MB

Download
memory/4952-147-0x00000000032A0000-0x00000000042A0000-memory.dmp

Filesize
16.0MB

Download
memory/4952-148-0x00000000032A0000-0x00000000042A0000-memory.dmp

Filesize
16.0MB

Download
memory/4952-149-0x00000000032A0000-0x00000000042A0000-memory.dmp

Filesize
16.0MB

Download
memory/4952-150-0x00000000032A0000-0x00000000042A0000-memory.dmp

Filesize
16.0MB

Download
memory/4952-151-0x00000000032A0000-0x00000000042A0000-memory.dmp

Filesize
16.0MB

Download
memory/4952-153-0x00000000032A0000-0x00000000042A0000-memory.dmp

Filesize
16.0MB

Download