Overview

overview

7

Static

static

1

Aristois-Free.jar

windows10-2004-x64

7

Analysis

  • max time kernel
    12s
  • max time network
    13s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230221-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/05/2023, 00:21

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    Aristois-Free.jar

  • Size

    6.6MB

  • MD5

    ad055bea7121922750ad604d2cc62ca0

  • SHA1

    2031ddbef721913b4d75670b4bf23526cf791c14

  • SHA256

    a6e0508a4c0169cfd003f4654b1930f3ddd355a9f45bea6e13242c55e9bf45f1

  • SHA512

    53ace3a16eee3ecd114d5357315585b13c0ff688123524a4315403dcf09de5757fbe17289510a0caa7542b4fd67a7158c8b588220a42c7f9a1753e7640fe6c28

  • SSDEEP

    196608:0EUYsbwEffIcZyk0AtQ1pe6rAs+1blTRLHKHCwK:78/fAdkIbAs8dJHKHzK

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\ProgramData\Oracle\Java\javapath\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\Aristois-Free.jar
    1⤵
    • Loads dropped DLL
    • Suspicious use of SetWindowsHookEx
    PID:4380

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\lwjglAdmin\3.3.1-SNAPSHOT\glfw.dll
          Filesize

          357KB

          MD5

          dad976fafd111ceedc7a473932e9da8f

          SHA1

          3c0e8e7fcbc854a87219fbbfd181c2cc76018144

          SHA256

          f61949c469c54a5f4e5a8e1668255b919ee1237f1e568acf4127dda0abcdc9a8

          SHA512

          64801d4d34f130b5ee33d2df3a266e2aed981265d13c6552ab73418471398c49cab9a617647b64298c1de432d078f1a7b830d4330980e7ef10dd15a1d18bda11

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\lwjglAdmin\3.3.1-SNAPSHOT\glfw.dll
          Filesize

          357KB

          MD5

          dad976fafd111ceedc7a473932e9da8f

          SHA1

          3c0e8e7fcbc854a87219fbbfd181c2cc76018144

          SHA256

          f61949c469c54a5f4e5a8e1668255b919ee1237f1e568acf4127dda0abcdc9a8

          SHA512

          64801d4d34f130b5ee33d2df3a266e2aed981265d13c6552ab73418471398c49cab9a617647b64298c1de432d078f1a7b830d4330980e7ef10dd15a1d18bda11

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\lwjglAdmin\3.3.1-SNAPSHOT\lwjgl.dll
          Filesize

          446KB

          MD5

          78b8212a157e985fa9d9ee9eaab033bd

          SHA1

          0c9b501520c20055ba77bbd8cae4895fcb1cfa40

          SHA256

          1cbc8a197aea7eee710735a57a8cae6c0953ad1fe2cb6e17c2e5afebeb93b5ec

          SHA512

          180dd20b04643d42195a30c28d455c923f395977f7dcb66b1ace85e99c1e3c00906542221092bf6d5465a5fc451d7523df862ab2bc050da3a136a6f635706d80

          Download Submit

        • memory/4380-143-0x0000000002B70000-0x0000000002B71000-memory.dmp

          Filesize

          4KB

          Download