Analysis

  • max time kernel
    114s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24-08-2023 10:56

General

  • Target

    SHIPPING DOCUMENT.jar

  • Size

    230KB

  • MD5

    c1a2d616e9e56606c37994d9f282c715

  • SHA1

    b16bbd569b900e3aa29288c0a7d62d1bc394ec5d

  • SHA256

    9ff9a98384481ba1c94951e6b444796b32785d6955dddc06e95084ee7e8c876b

  • SHA512

    f4b8555421c77cf2e4d19f969855b753797c3810bcc7bd26c21df940c0dd013ef31a0a93018cda6a28032e3c74f1b834783973eaf9baabd8e4d4b8dfc10510e9

  • SSDEEP

    6144:o3EPQ/BQ5N/9uhePX4t7Kl8JJLZGolTmxN8XynnvRvmR4rRf:po/BQ5NQh04gqJ5goTXynvROKl

Score
4/10

Malware Config

Signatures

  • Drops file in Program Files directory 12 IoCs

Processes

  • C:\ProgramData\Oracle\Java\javapath\java.exe
    java -jar "C:\Users\Admin\AppData\Local\Temp\SHIPPING DOCUMENT.jar"
    1⤵
    • Drops file in Program Files directory
    PID:2912

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2912-2-0x00000000029F0000-0x00000000039F0000-memory.dmp

    Filesize

    16.0MB

  • memory/2912-11-0x0000000000D60000-0x0000000000D61000-memory.dmp

    Filesize

    4KB

  • memory/2912-17-0x0000000000D60000-0x0000000000D61000-memory.dmp

    Filesize

    4KB

  • memory/2912-20-0x0000000002C60000-0x0000000002C70000-memory.dmp

    Filesize

    64KB

  • memory/2912-21-0x00000000029F0000-0x00000000039F0000-memory.dmp

    Filesize

    16.0MB