3b451186d1fb87655def954f7836b5d85da8c16d55404f4a208fa0bd2bc91db7 | Triage

Analysis

max time kernel
149s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
03-07-2022 17:03

Sharing

Report Analysis Logs

General

Target

3b451186d1fb87655def954f7836b5d85da8c16d55404f4a208fa0bd2bc91db7.jar
Size

135KB
MD5

6ff6fd86fa186b1fa67f418fbe136c41
SHA1

076b458ce535a5f6138360de70b8863599de2022
SHA256

3b451186d1fb87655def954f7836b5d85da8c16d55404f4a208fa0bd2bc91db7
SHA512

ba396f7c7e83b2f59dfb29b365cecd7f44e06027bfc67f75e98b96a56e873948d66ae379b952d4ca61802695ff35ffd44df72a0c3fa7958fbae96934ce734899

Score

4^/10

Malware Config

Signatures

Drops file in Program Files directory 12 IoCs

Processes:

java.exe

description	ioc	process
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\ntdll.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\dll\ntdll.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\symbols\dll\ntdll.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\server\dll\jvm.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\symbols\dll\jvm.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\server\symbols\dll\ntdll.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\dll\jvm.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\server\ntdll.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\server\dll\ntdll.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\server\jvm.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\server\symbols\dll\jvm.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\jvm.pdb	java.exe

C:\ProgramData\Oracle\Java\javapath\java.exe
java -jar C:\Users\Admin\AppData\Local\Temp\3b451186d1fb87655def954f7836b5d85da8c16d55404f4a208fa0bd2bc91db7.jar
1⤵
- Drops file in Program Files directory
PID:2476

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2476-132-0x0000000002C90000-0x0000000003C90000-memory.dmp

Filesize
16.0MB

Download
memory/2476-133-0x0000000002C90000-0x0000000003C90000-memory.dmp

Filesize
16.0MB

Download
memory/2476-155-0x0000000002C90000-0x0000000003C90000-memory.dmp

Filesize
16.0MB

Download
memory/2476-156-0x0000000002C90000-0x0000000003C90000-memory.dmp

Filesize
16.0MB

Download