Analysis
-
max time kernel
373s -
max time network
1588s -
platform
windows10-1703_x64 -
resource
win10-20220901-en -
resource tags
arch:x64arch:x86image:win10-20220901-enlocale:en-usos:windows10-1703-x64system -
submitted
23-11-2022 11:24
Static task
static1
Behavioral task
behavioral1
Sample
logo2392427892380249940.jar
Resource
win10-20220901-en
windows10-1703-x64
2 signatures
1800 seconds
General
-
Target
logo2392427892380249940.jar
-
Size
51KB
-
MD5
fca3dc4c73f67ec888aafc37a4464739
-
SHA1
2511a3e134f2c64e1f94fefc44db06523debdaf9
-
SHA256
a233f20270742df1df1b135933a9155602802e459a663393b1a34c99496ae916
-
SHA512
f48b2604772384a0c2c070fd9c76d78d542132a63ebf0e5ba457689d12ea7c5026b52a9cdbd093746dc1d1a2b255095a9e60cd4f8a9dda8852e4436050273831
-
SSDEEP
1536:OLBYkyvvGIShafWUnK/UOl/MVPzihKv40j:uyv+IShFRS60j
Score
4/10
Malware Config
Signatures
-
Drops file in Program Files directory 12 IoCs
Processes:
java.exedescription ioc process File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\ntdll.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\dll\jvm.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\symbols\dll\jvm.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\dll\jvm.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\ntdll.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\symbols\dll\ntdll.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\dll\ntdll.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\symbols\dll\ntdll.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\jvm.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\jvm.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\symbols\dll\jvm.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\dll\ntdll.pdb java.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
java.exepid process 1460 java.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1460-124-0x0000000002E60000-0x0000000003E60000-memory.dmpFilesize
16.0MB