8ea07077502eacce3b5c7d08f71abb1daee1fdc626548ba20953aa31e54c465e

Submit
Reports

Overview

overview

Static

static

ide-eval-r....6.jar

windows7-x64

ide-eval-r....6.jar

windows10-2004-x64

JetBrains ...ME.pdf

windows7-x64

JetBrains ...ME.pdf

windows10-2004-x64

JetBrains ...er.jar

windows7-x64

JetBrains ...er.jar

windows10-2004-x64

JetBrains ...ns.jar

windows7-x64

JetBrains ...ns.jar

windows10-2004-x64

JetBrains ...me.jar

windows7-x64

JetBrains ...me.jar

windows10-2004-x64

JetBrains ...ap.jar

windows7-x64

JetBrains ...ap.jar

windows10-2004-x64

JetBrains ...er.jar

windows7-x64

JetBrains ...er.jar

windows10-2004-x64

JetBrains ...rl.jar

windows7-x64

JetBrains ...rl.jar

windows10-2004-x64

JetBrains ...rs.vbs

windows7-x64

JetBrains ...rs.vbs

windows10-2004-x64

JetBrains ...er.vbs

windows7-x64

JetBrains ...er.vbs

windows10-2004-x64

JetBrains ...all.sh

ubuntu-18.04-amd64

JetBrains ...all.sh

debian-9-armhf

JetBrains ...all.sh

debian-9-mips

JetBrains ...all.sh

debian-9-mipsel

JetBrains ...rs.vbs

windows7-x64

JetBrains ...rs.vbs

windows10-2004-x64

JetBrains ...er.vbs

windows7-x64

JetBrains ...er.vbs

windows10-2004-x64

JetBrains ...all.sh

ubuntu-18.04-amd64

JetBrains ...all.sh

debian-9-armhf

JetBrains ...all.sh

debian-9-mips

JetBrains ...all.sh

debian-9-mipsel

Analysis

max time kernel
151s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
16-08-2022 02:49

Sharing

Copy URL

Twitter E-mail

Static task

static1

pdf link

1 signatures

Behavioral task

behavioral1

Sample

ide-eval-resetter/lib/ide-eval-resetter-2.1.6.jar

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

ide-eval-resetter/lib/ide-eval-resetter-2.1.6.jar

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/README.pdf

Resource

win7-20220812-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/README.pdf

Resource

win10v2004-20220812-en

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral5

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/ja-netfilter.jar

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/ja-netfilter.jar

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/plugins-jetbrains/dns.jar

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/plugins-jetbrains/dns.jar

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/plugins-jetbrains/hideme.jar

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/plugins-jetbrains/hideme.jar

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/plugins-jetbrains/mymap.jar

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/plugins-jetbrains/mymap.jar

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/plugins-jetbrains/power.jar

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/plugins-jetbrains/power.jar

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/plugins-jetbrains/url.jar

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/plugins-jetbrains/url.jar

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/scripts/install-all-users.vbs

Resource

win7-20220812-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral18

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/scripts/install-all-users.vbs

Resource

win10v2004-20220812-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/scripts/install-current-user.vbs

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/scripts/install-current-user.vbs

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/scripts/install.sh

Resource

ubuntu1804-amd64-en-20211208

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/scripts/install.sh

Resource

debian9-armhf-en-20211208

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/scripts/install.sh

Resource

debian9-mipsbe-en-20211208

debian-9-mips

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/scripts/install.sh

Resource

debian9-mipsel-en-20211208

debian-9-mipsel

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/scripts/uninstall-all-users.vbs

Resource

win7-20220812-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral26

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/scripts/uninstall-all-users.vbs

Resource

win10v2004-20220812-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral27

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/scripts/uninstall-current-user.vbs

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/scripts/uninstall-current-user.vbs

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/scripts/uninstall.sh

Resource

ubuntu1804-amd64-en-20211208

ubuntu-18.04-amd64

2 signatures

150 seconds

Behavioral task

behavioral30

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/scripts/uninstall.sh

Resource

debian9-armhf-en-20211208

debian-9-armhf

2 signatures

150 seconds

Behavioral task

behavioral31

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/scripts/uninstall.sh

Resource

debian9-mipsbe-en-20211208

debian-9-mips

2 signatures

150 seconds

Behavioral task

behavioral32

Sample

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/scripts/uninstall.sh

Resource

debian9-mipsel-en-20211208

debian-9-mipsel

2 signatures

150 seconds

Report Analysis Logs

General

Target

JetBrains 2022 ??/??2????2099????????????/ja-netfilter-all/README.pdf
Size

54KB
MD5

8ce55044d4f07f14c10018313ae341f1
SHA1

a18cf7130c4e22ac068b3581f558162026884805
SHA256

2b6d5f0d5e1ffe4046007ad6cf37dd026d762feac08057a002013efa91ea566f
SHA512

fe61ac988375f739c2141e586745268c30a6690884ff2d65b10d7353eba760d46be5929b2efce36b9f80166e3b6e4ade67529ac044658a26ff6ec75750d165f1

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

360 AcroRd32.exe
360 AcroRd32.exe
360 AcroRd32.exe
360 AcroRd32.exe

pid	process
360	AcroRd32.exe
360	AcroRd32.exe
360	AcroRd32.exe
360	AcroRd32.exe

Processes

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\JetBrains 2022 __\__2____2099____________\ja-netfilter-all\README.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:360

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/360-54-0x0000000075771000-0x0000000075773000-memory.dmp

Filesize
8KB

Download