Analysis
-
max time kernel
69s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
16-02-2023 10:25
Static task
static1
Behavioral task
behavioral1
Sample
Solicitud de Cotización #00071533.pdf(83KB).jar
Resource
win7-20221111-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
Solicitud de Cotización #00071533.pdf(83KB).jar
Resource
win10v2004-20220812-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
Solicitud de Cotización #00071533.pdf(83KB).jar
-
Size
209KB
-
MD5
4c51fc8a1f807ad8eb179f1f49123252
-
SHA1
31bdd7ff17dd10ecfda85cbfbeb97b13aacbcd6c
-
SHA256
bc5e5f0288b0af3b2d2e74f48d36d1daa9cd341948d01cc1f8b6a53f1e6e73af
-
SHA512
bd78e4492f86a3c52f36d3e0b9711c60c5c51984a3f7584caf99b8080297bc85ca0cc0868657cb8263f4395158adb38e549771125f5a9f49b923a88eeb4b2520
-
SSDEEP
6144:51MubM9ocdwGvgfJpEy9ha4bZu2xmUQMgsXYg:51M8MjwaybfbZu27uU
Score
4/10
Malware Config
Signatures
-
Drops file in Program Files directory 12 IoCs
description ioc Process File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\ntdll.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\dll\ntdll.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\ntdll.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\dll\ntdll.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\dll\jvm.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\symbols\dll\jvm.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\jvm.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\symbols\dll\ntdll.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\symbols\dll\ntdll.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\jvm.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\dll\jvm.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\symbols\dll\jvm.pdb java.exe