Overview

overview

8

Static

static

8

FastVerCode.dll

windows7-x64

1

FastVerCode.dll

windows10-2004-x64

3

ICSharpCod...ib.dll

windows7-x64

1

ICSharpCod...ib.dll

windows10-2004-x64

1

Interop.ADODB.dll

windows7-x64

1

Interop.ADODB.dll

windows10-2004-x64

1

Interop.ADOX.dll

windows7-x64

1

Interop.ADOX.dll

windows10-2004-x64

1

Interop.ADQX.dll

windows7-x64

8

Interop.ADQX.dll

windows10-2004-x64

8

Interop.ADQX64.dll

windows7-x64

1

Interop.ADQX64.dll

windows10-2004-x64

1

Interop.JPO.dll

windows7-x64

1

Interop.JPO.dll

windows10-2004-x64

3

Interop.JRO.dll

windows7-x64

1

Interop.JRO.dll

windows10-2004-x64

1

QQռ...��.exe

windows7-x64

8

QQռ...��.exe

windows10-2004-x64

8

UUWiseHelper.dll

windows7-x64

1

UUWiseHelper.dll

windows10-2004-x64

3

dl.dll

windows7-x64

1

dl.dll

windows10-2004-x64

1

edithtm/in...�.html

windows7-x64

1

edithtm/in...�.html

windows10-2004-x64

1

edithtm/in...x.html

windows7-x64

1

edithtm/in...x.html

windows10-2004-x64

1

edithtm/js...on.asp

windows7-x64

3

edithtm/js...on.asp

windows10-2004-x64

3

edithtm/js....1.jar

windows7-x64

1

edithtm/js....1.jar

windows10-2004-x64

1

edithtm/js....4.jar

windows7-x64

1

edithtm/js....4.jar

windows10-2004-x64

1

Analysis

  • max time kernel
    79s
  • max time network
    34s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    26-11-2022 18:20

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    edithtm/jsp/lib/commons-io-1.4.jar

  • Size

    106KB

  • MD5

    b6a50c8a15ece8753e37cbe5700bf84f

  • SHA1

    a8762d07e76cfde2395257a5da47ba7c1dbd3dce

  • SHA256

    a7f713593007813bf07d19bd1df9f81c86c0719e9a0bb2ef1b98b78313fc940d

  • SHA512

    a1cc0feb2805e08d49229a20cc4423bb52d6800aab3f65723a28ed7d3429455a3f6ef80daaabad7aa89bfb70e4d3c362b268401e636505d1c89bfa7baf871d94

  • SSDEEP

    1536:LAB2We4BHlyyoZHBYrJRGD+D2/Hs6Nf6dlRMIpg94XEvDMawVTwmR7+eZlDrdpkU:k7Fyd2JESDEd6He6yEiuwmJ+oVpms4E

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\edithtm\jsp\lib\commons-io-1.4.jar
    1⤵
      PID:576

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/576-54-0x000007FEFB8A1000-0x000007FEFB8A3000-memory.dmp
      Filesize

      8KB

      Download
    • memory/576-61-0x00000000022B0000-0x00000000052B0000-memory.dmp
      Filesize

      48.0MB

      Download
    • memory/576-65-0x00000000022B0000-0x00000000052B0000-memory.dmp
      Filesize

      48.0MB

      Download