Analysis
- max time kernel
87s - max time network
167s - platform
windows10-2004_x64 - resource
win10v2004-20220721-en - resource tags
- submitted
01/08/2022, 15:45
General
- Target 5c1200ad6250c9c6666228f51cfb1ebf6f4e9270caa7115f7cffd86397aa2ff1.jar
- Size 664KB
- Sample220801-s7j5vsbfc9
- SHA256 5c1200ad6250c9c6666228f51cfb1ebf6f4e9270caa7115f7cffd86397aa2ff1
Malware Config
Signatures
- Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\ProgramData\Oracle\Java\javapath\java.exejava -jar C:\Users\Admin\AppData\Local\Temp\5c1200ad6250c9c6666228f51cfb1ebf6f4e9270caa7115f7cffd86397aa2ff1.jar1⤵
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Java\jre1.8.0_66\bin\java.exe"C:\Program Files\Java\jre1.8.0_66\bin\java.exe" -jar C:\Users\Admin\AppData\Local\Temp\_0.00714812600981943121820003415756364.class2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
90737d32e3aba4b.timestamp
_0.00714812600981943121820003415756364.class
83aa4cc77f591dfc2374580bbd95f6ba_e2a67401-6492-4cbf-87ab-b664c084dada
memory/2912-176-0x00000000029B0000-0x00000000039B0000-memory.dmp
memory/4192-149-0x0000000002EE0000-0x0000000003EE0000-memory.dmp
memory/4192-150-0x0000000002EE0000-0x0000000003EE0000-memory.dmp
memory/4192-151-0x0000000002EE0000-0x0000000003EE0000-memory.dmp
memory/4192-148-0x0000000002EE0000-0x0000000003EE0000-memory.dmp
memory/4192-159-0x0000000002EE0000-0x0000000003EE0000-memory.dmp
memory/4192-147-0x0000000002EE0000-0x0000000003EE0000-memory.dmp
memory/4192-170-0x0000000002EE0000-0x0000000003EE0000-memory.dmp
memory/4192-132-0x0000000002EE0000-0x0000000003EE0000-memory.dmp
memory/4192-146-0x0000000002EE0000-0x0000000003EE0000-memory.dmp
memory/4192-180-0x0000000002EE0000-0x0000000003EE0000-memory.dmp
memory/4192-181-0x0000000002EE0000-0x0000000003EE0000-memory.dmp