Overview
overview
5Static
static
ide-eval-r....6.jar
windows7-x64
1ide-eval-r....6.jar
windows10-2004-x64
1JetBrains ...er.jar
windows7-x64
1JetBrains ...er.jar
windows10-2004-x64
1JetBrains ...ns.jar
windows7-x64
1JetBrains ...ns.jar
windows10-2004-x64
1JetBrains ...me.jar
windows7-x64
1JetBrains ...me.jar
windows10-2004-x64
1JetBrains ...er.jar
windows7-x64
1JetBrains ...er.jar
windows10-2004-x64
1JetBrains ...rl.jar
windows7-x64
1JetBrains ...rl.jar
windows10-2004-x64
1JetBrains ...nux.sh
ubuntu-18.04-amd64
5JetBrains ...nux.sh
debian-9-armhf
5JetBrains ...nux.sh
debian-9-mips
5JetBrains ...nux.sh
debian-9-mipsel
5JetBrains ...ws.vbs
windows7-x64
1JetBrains ...ws.vbs
windows10-2004-x64
1Analysis
-
max time kernel
0s -
max time network
156s -
platform
linux_armhf -
resource
debian9-armhf-en-20211208 -
resource tags
arch:armhfimage:debian9-armhf-en-20211208kernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem -
submitted
05-08-2022 16:34
Static task
static1
Behavioral task
behavioral1
Sample
ide-eval-resetter/lib/ide-eval-resetter-2.1.6.jar
Resource
win7-20220718-en
Behavioral task
behavioral2
Sample
ide-eval-resetter/lib/ide-eval-resetter-2.1.6.jar
Resource
win10v2004-20220722-en
Behavioral task
behavioral3
Sample
JetBrains 2022 ???????/??2???????????????/ja-netfilter/ja-netfilter.jar
Resource
win7-20220715-en
Behavioral task
behavioral4
Sample
JetBrains 2022 ???????/??2???????????????/ja-netfilter/ja-netfilter.jar
Resource
win10v2004-20220721-en
Behavioral task
behavioral5
Sample
JetBrains 2022 ???????/??2???????????????/ja-netfilter/plugins/dns.jar
Resource
win7-20220718-en
Behavioral task
behavioral6
Sample
JetBrains 2022 ???????/??2???????????????/ja-netfilter/plugins/dns.jar
Resource
win10v2004-20220721-en
Behavioral task
behavioral7
Sample
JetBrains 2022 ???????/??2???????????????/ja-netfilter/plugins/hideme.jar
Resource
win7-20220718-en
Behavioral task
behavioral8
Sample
JetBrains 2022 ???????/??2???????????????/ja-netfilter/plugins/hideme.jar
Resource
win10v2004-20220721-en
Behavioral task
behavioral9
Sample
JetBrains 2022 ???????/??2???????????????/ja-netfilter/plugins/power.jar
Resource
win7-20220715-en
Behavioral task
behavioral10
Sample
JetBrains 2022 ???????/??2???????????????/ja-netfilter/plugins/power.jar
Resource
win10v2004-20220721-en
Behavioral task
behavioral11
Sample
JetBrains 2022 ???????/??2???????????????/ja-netfilter/plugins/url.jar
Resource
win7-20220718-en
Behavioral task
behavioral12
Sample
JetBrains 2022 ???????/??2???????????????/ja-netfilter/plugins/url.jar
Resource
win10v2004-20220721-en
Behavioral task
behavioral13
Sample
JetBrains 2022 ???????/reset_script/reset_jetbrains_eval_mac_linux.sh
Resource
ubuntu1804-amd64-en-20211208
Behavioral task
behavioral14
Sample
JetBrains 2022 ???????/reset_script/reset_jetbrains_eval_mac_linux.sh
Resource
debian9-armhf-en-20211208
Behavioral task
behavioral15
Sample
JetBrains 2022 ???????/reset_script/reset_jetbrains_eval_mac_linux.sh
Resource
debian9-mipsbe-en-20211208
Behavioral task
behavioral16
Sample
JetBrains 2022 ???????/reset_script/reset_jetbrains_eval_mac_linux.sh
Resource
debian9-mipsel-en-20211208
Behavioral task
behavioral17
Sample
JetBrains 2022 ???????/reset_script/reset_jetbrains_eval_windows.vbs
Resource
win7-20220715-en
Behavioral task
behavioral18
Sample
JetBrains 2022 ???????/reset_script/reset_jetbrains_eval_windows.vbs
Resource
win10v2004-20220721-en
General
-
Target
JetBrains 2022 ???????/reset_script/reset_jetbrains_eval_mac_linux.sh
-
Size
558B
-
MD5
d4a64ce441aaef7f110a3f74296113aa
-
SHA1
a9b938e9f7a568b0439b4e0f4462d48da3c1f850
-
SHA256
1a34b0606276623da4fcc89f094068d74475e7c2e5d92b16cdbc714df3a0eb6e
-
SHA512
4c2038a360cb1cb71837d8dabc72c255f9d4082e840264263479b988524bde1c19550a5f703bf8877b029234b661a92c43268a71acf833fb0800498d3fc17977
Malware Config
Signatures
-
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
Processes:
reset_jetbrains_eval_mac_linux.shdescription ioc process /tmp/JetBrains 2022 ???????/reset_script/reset_jetbrains_eval_mac_linux.sh /tmp/JetBrains 2022 ???????/reset_script/reset_jetbrains_eval_mac_linux.sh reset_jetbrains_eval_mac_linux.sh