Overview

overview

7

Static

static

1

Aristois-Free.jar

windows7-x64

1

Aristois-Free.jar

windows10-2004-x64

7

Analysis

  • max time kernel
    97s
  • max time network
    131s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/05/2023, 17:42

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Aristois-Free.jar

  • Size

    6.6MB

  • MD5

    4cad86ed173ff0dad198582d86bf62b6

  • SHA1

    d25bd59b411076ccc1ed4b4daef78aef093a9d3d

  • SHA256

    fbff2ebba99bfa194af533852062c6d60831c7cc3801d4af980c329721484a28

  • SHA512

    e233c3ba1b3aeab0e286ad46e7ac4f34ae2207269c7a624bc29d90f14e6ff2dac4d74785414966569ab8da0b2d65d591eadd8884c1989976c361b5ff0c87aea2

  • SSDEEP

    196608:N0EY4XwEff0cxykwL9g1leOnAU+1blTRLXKrC05:KYDf8FkHXAU8dJXKrb5

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\ProgramData\Oracle\Java\javapath\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\Aristois-Free.jar
    1⤵
    • Loads dropped DLL
    • Suspicious use of SetWindowsHookEx
    PID:4628

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lwjglAdmin\3.3.1-SNAPSHOT\glfw.dll
    Filesize

    357KB

    MD5

    dad976fafd111ceedc7a473932e9da8f

    SHA1

    3c0e8e7fcbc854a87219fbbfd181c2cc76018144

    SHA256

    f61949c469c54a5f4e5a8e1668255b919ee1237f1e568acf4127dda0abcdc9a8

    SHA512

    64801d4d34f130b5ee33d2df3a266e2aed981265d13c6552ab73418471398c49cab9a617647b64298c1de432d078f1a7b830d4330980e7ef10dd15a1d18bda11

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\lwjglAdmin\3.3.1-SNAPSHOT\glfw.dll
    Filesize

    357KB

    MD5

    dad976fafd111ceedc7a473932e9da8f

    SHA1

    3c0e8e7fcbc854a87219fbbfd181c2cc76018144

    SHA256

    f61949c469c54a5f4e5a8e1668255b919ee1237f1e568acf4127dda0abcdc9a8

    SHA512

    64801d4d34f130b5ee33d2df3a266e2aed981265d13c6552ab73418471398c49cab9a617647b64298c1de432d078f1a7b830d4330980e7ef10dd15a1d18bda11

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\lwjglAdmin\3.3.1-SNAPSHOT\lwjgl.dll
    Filesize

    446KB

    MD5

    78b8212a157e985fa9d9ee9eaab033bd

    SHA1

    0c9b501520c20055ba77bbd8cae4895fcb1cfa40

    SHA256

    1cbc8a197aea7eee710735a57a8cae6c0953ad1fe2cb6e17c2e5afebeb93b5ec

    SHA512

    180dd20b04643d42195a30c28d455c923f395977f7dcb66b1ace85e99c1e3c00906542221092bf6d5465a5fc451d7523df862ab2bc050da3a136a6f635706d80

    Download Submit

  • memory/4628-143-0x00000000022A0000-0x00000000022A1000-memory.dmp

    Filesize

    4KB

    Download