Analysis

  • max time kernel
    91s
  • max time network
    136s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220414-en
  • submitted
    04-07-2022 03:39

General

  • Target

    lib_oceanlotus.jar

  • Size

    2.7MB

  • MD5

    8acdd0fab685bfedb7bea4809c948d3a

  • SHA1

    c8a7ac966f696e6608f38a22f4676f1747772665

  • SHA256

    d85141e86a3eda6e74f2318d2b7553193789ce6dcf1a2c7266bba4666f0203f1

  • SHA512

    7b3672d90a85b7c0d9aad95409686491fecdf3e156e02c8d8ba4db0843646a299011330c83130e49a27e0d66dd9b5cdcc8bfa9bc66d4120e867823b6d17e75c5

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\ProgramData\Oracle\Java\javapath\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\lib_oceanlotus.jar
    1⤵
    • Loads dropped DLL
    PID:3336

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\jna-63116079\jna4720896414537551420.dll
    Filesize

    241KB

    MD5

    3c016613eb59259f94e2add2b8d926c0

    SHA1

    e26183f9919ed1daf5c1856c16f8a074bd9ef6dc

    SHA256

    df09119557efe5a5fc2237996b09c3da34fb60eb3ff0c6a5b2a35ec4212e0119

    SHA512

    9e5a4240e276391c9480d0d96d953c12ebb315dc214383afb716091c090f157344901608d3d80f0ca3af80ff659d7d4dff6b21dff6c9512fa02a4cd5eb496ff6

  • memory/3336-132-0x0000000002700000-0x0000000003700000-memory.dmp
    Filesize

    16.0MB