4b67e6081dcc81daea8765408bc3fc6868078b4f0f0c584319d7efe31eb6df1f

Analysis

max time kernel
122s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
23/08/2023, 21:35

Target

a70c22fd2b9655415e31fbb557bfe9cc413fbf4db9a9ffab5fa0970f6c784b88.jar
Size

5KB
MD5

e3f59595cdf2e24a7945987f6e94b210
SHA1

ec2923b780dcdacb4b418c7108dd0fa3f7f472a4
SHA256

a70c22fd2b9655415e31fbb557bfe9cc413fbf4db9a9ffab5fa0970f6c784b88
SHA512

cc5cc7fe79e764a8e910b939c97416cd99bcd1adc7c022d72b321861f7d499fc7977165fe695ba7df73ac00e3ab96f65848001ebf7cf7ecacc7bae063450555f
SSDEEP

96:XmSXj+Fs2izQaNKHImdYnsVpArIIYP1OupShqwC8c5VUo206GqRArOaXVX6cuUih:XmC+SnapArIIY9FpSoaoVB25G9rOaXVw

Score

7^/10

Drops startup file 2 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\java.jar	java.exe
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\java.jar	java.exe

Drops file in Program Files directory 12 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\ntdll.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\symbols\dll\ntdll.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\server\jvm.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\server\dll\jvm.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\server\symbols\dll\jvm.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\jvm.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\symbols\dll\jvm.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\dll\jvm.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\server\ntdll.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\server\dll\ntdll.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\server\symbols\dll\ntdll.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\dll\ntdll.pdb	java.exe

memory/2244-4-0x0000000003150000-0x0000000004150000-memory.dmp

Filesize
16.0MB

Download
memory/2244-18-0x0000000002E20000-0x0000000002E21000-memory.dmp

Filesize
4KB

Download
memory/2244-21-0x0000000003150000-0x0000000004150000-memory.dmp

Filesize
16.0MB

Download
memory/2244-25-0x00000000033D0000-0x00000000033E0000-memory.dmp

Filesize
64KB

Download
memory/2244-27-0x0000000003400000-0x0000000003410000-memory.dmp

Filesize
64KB

Download
memory/2244-26-0x00000000033F0000-0x0000000003400000-memory.dmp

Filesize
64KB

Download
memory/2244-28-0x0000000003150000-0x0000000004150000-memory.dmp

Filesize
16.0MB

Download
memory/2244-29-0x0000000003150000-0x0000000004150000-memory.dmp

Filesize
16.0MB

Download