Analysis

  • max time kernel
    174s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20230712-en
  • resource tags

    arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
  • submitted
    19-07-2023 11:59

General

  • Target

    jre-8u25-windows-i586.exe

  • Size

    28.4MB

  • MD5

    2cdd85286c5531557f3f20a7cafa7291

  • SHA1

    ff3d21c97e9ca71157f12221ccf0788a9775ec92

  • SHA256

    8f6988e717e0334b33b7f4697c8ebbb5038c218994c8da7dc295986fe43b2b8b

  • SHA512

    b08e7f13120820e3c7e5edce922413afb5d96ed685ef73b720262bb3223666dca16f33fadd2dc6945aafdf2b08f1453a007fd36b7a017b6a2a242d2052d701cd

  • SSDEEP

    786432:NjlYG7V0R17xr+6IPhtJfgQ939vwT7yyNo0/1RZpDtzSWDgfRZl:NiFX9rFitJJd9vwT7lbZpNS++p

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\jre-8u25-windows-i586.exe
    "C:\Users\Admin\AppData\Local\Temp\jre-8u25-windows-i586.exe"
    1⤵
      PID:2868

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\jusched.log

      Filesize

      1KB

      MD5

      21f0018039b9452d3fad4d00edaf8e9b

      SHA1

      a7127500e782198b5ec1555f491f56670dcfa6b8

      SHA256

      08274ff15618ad1033e19d31f4a5715a6437216be5886a00d7979b1fdba932a2

      SHA512

      642c5258fd04cf4032d4c906be42e67166e734783ae5ecf0664ca272cda74aa7b018e12a968f3b290bc8ad5ff4e48d71f269c6f44cc5ecf276cf02ffef251628

    • C:\Users\Admin\AppData\Local\Temp\jusched.log

      Filesize

      4KB

      MD5

      709478b64b1bcbb957abbacf57e123f4

      SHA1

      3b4555a11828b01a0e21366e1d5b32a8ac987cdb

      SHA256

      51089f9aecd08e49558306811a375f4e6f1a112e9e8e67b245f9b7213bcb5ed1

      SHA512

      d109f48f5ad816b18a6d2cbac42b510543dcb3243896db47da3c8b75066081228e6297a413d86f4f2da5a8ce446c60307196970ebf321633a0473e142a75032e

    • memory/2868-63-0x0000000000400000-0x000000000505A000-memory.dmp

      Filesize

      76.4MB

    • memory/2868-100-0x0000000000400000-0x000000000505A000-memory.dmp

      Filesize

      76.4MB

    • memory/2868-105-0x00000000071F0000-0x00000000071F1000-memory.dmp

      Filesize

      4KB

    • memory/2868-106-0x0000000000400000-0x000000000505A000-memory.dmp

      Filesize

      76.4MB