8ea07077502eacce3b5c7d08f71abb1daee1fdc626548ba20953aa31e54c465e

Submit
Reports

Overview

overview

Static

static

ide-eval-r....6.jar

windows7-x64

ide-eval-r....6.jar

windows10-2004-x64

JetBrains ...ME.pdf

windows7-x64

JetBrains ...ME.pdf

windows10-2004-x64

JetBrains ...er.jar

windows7-x64

JetBrains ...er.jar

windows10-2004-x64

JetBrains ...ns.jar

windows7-x64

JetBrains ...ns.jar

windows10-2004-x64

JetBrains ...me.jar

windows7-x64

JetBrains ...me.jar

windows10-2004-x64

JetBrains ...ap.jar

windows7-x64

JetBrains ...ap.jar

windows10-2004-x64

JetBrains ...er.jar

windows7-x64

JetBrains ...er.jar

windows10-2004-x64

JetBrains ...rl.jar

windows7-x64

JetBrains ...rl.jar

windows10-2004-x64

JetBrains ...rs.vbs

windows7-x64

JetBrains ...rs.vbs

windows10-2004-x64

JetBrains ...er.vbs

windows7-x64

JetBrains ...er.vbs

windows10-2004-x64

JetBrains ...all.sh

ubuntu-18.04-amd64

JetBrains ...all.sh

debian-9-armhf

JetBrains ...all.sh

debian-9-mips

JetBrains ...all.sh

debian-9-mipsel

JetBrains ...rs.vbs

windows7-x64

JetBrains ...rs.vbs

windows10-2004-x64

JetBrains ...er.vbs

windows7-x64

JetBrains ...er.vbs

windows10-2004-x64

JetBrains ...all.sh

ubuntu-18.04-amd64

JetBrains ...all.sh

debian-9-armhf

JetBrains ...all.sh

debian-9-mips

JetBrains ...all.sh

debian-9-mipsel

Analysis

max time kernel
0s
max time network
158s
platform
linux_armhf
resource
debian9-armhf-en-20211208
resource tags

arch:armhfimage:debian9-armhf-en-20211208kernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
16-08-2022 02:49

Sharing

Copy URL

Twitter E-mail

Static task

static1

pdf link

1 signatures

Behavioral task

behavioral1

Sample

ide-eval-resetter/lib/ide-eval-resetter-2.1.6.jar

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

ide-eval-resetter/lib/ide-eval-resetter-2.1.6.jar

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/README.pdf

Resource

win7-20220812-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/README.pdf

Resource

win10v2004-20220812-en

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral5

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/ja-netfilter.jar

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/ja-netfilter.jar

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/plugins-jetbrains/dns.jar

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/plugins-jetbrains/dns.jar

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/plugins-jetbrains/hideme.jar

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/plugins-jetbrains/hideme.jar

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/plugins-jetbrains/mymap.jar

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/plugins-jetbrains/mymap.jar

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/plugins-jetbrains/power.jar

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/plugins-jetbrains/power.jar

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/plugins-jetbrains/url.jar

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/plugins-jetbrains/url.jar

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/scripts/install-all-users.vbs

Resource

win7-20220812-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral18

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/scripts/install-all-users.vbs

Resource

win10v2004-20220812-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/scripts/install-current-user.vbs

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/scripts/install-current-user.vbs

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/scripts/install.sh

Resource

ubuntu1804-amd64-en-20211208

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/scripts/install.sh

Resource

debian9-armhf-en-20211208

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/scripts/install.sh

Resource

debian9-mipsbe-en-20211208

debian-9-mips

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/scripts/install.sh

Resource

debian9-mipsel-en-20211208

debian-9-mipsel

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/scripts/uninstall-all-users.vbs

Resource

win7-20220812-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral26

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/scripts/uninstall-all-users.vbs

Resource

win10v2004-20220812-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral27

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/scripts/uninstall-current-user.vbs

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/scripts/uninstall-current-user.vbs

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/scripts/uninstall.sh

Resource

ubuntu1804-amd64-en-20211208

ubuntu-18.04-amd64

2 signatures

150 seconds

Behavioral task

behavioral30

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/scripts/uninstall.sh

Resource

debian9-armhf-en-20211208

debian-9-armhf

2 signatures

150 seconds

Behavioral task

behavioral31

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/scripts/uninstall.sh

Resource

debian9-mipsbe-en-20211208

debian-9-mips

2 signatures

150 seconds

Behavioral task

behavioral32

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/scripts/uninstall.sh

Resource

debian9-mipsel-en-20211208

debian-9-mipsel

2 signatures

150 seconds

Report Analysis Logs

General

Target

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/scripts/install.sh
Size

3KB
MD5

a39586feddfc26b3193372ce44f48abc
SHA1

25fafe775fd3735b2506ef8286d5768c04e0b179
SHA256

3666798d273bacc4e8515296da6c0601e5ea2e69c6aceeb25afb5d450e62c00d
SHA512

a63f744231531d894983ff10822f11e37ea0ac8189981e19c7be52d7480a37b9800247dffec1072dfd21413cbab65f1abcf73633fef33d57556461aa890016be

Score

5^/10

Malware Config

Signatures

Writes file to tmp directory 1 IoCs

Malware often drops required files in the /tmp directory.

Processes:

install.sh

description	ioc	process
/tmp/JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/scripts/install.sh	/tmp/JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/scripts/install.sh	install.sh

Processes

/tmp/JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/scripts/install.sh
"/tmp/JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/scripts/install.sh"
1⤵
- Writes file to tmp directory
PID:355
- /bin/uname
  uname -s
  2⤵
  PID:356
- /usr/bin/dirname
  dirname
  2⤵
  PID:358

/usr/bin/dirname
dirname "/tmp/JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/scripts/install.sh"
1⤵
PID:360

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads