Analysis

  • max time kernel
    142s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230831-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230831-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/09/2023, 01:00

General

  • Target
    5a8822b39d40ecfeb5e7e53a1ba98c1a76b61c4362c132af4658e75074dc487d.jar
  • Size 170KB
  • Sample230901-bctx5sbd6v
  • SHA256 5a8822b39d40ecfeb5e7e53a1ba98c1a76b61c4362c132af4658e75074dc487d
  • MD5 SHA1 SHA512 SSDEEP
Score
4/10

Malware Config

Signatures

  • Drops file in Program Files directory 12 IoCs

Processes

  • C:\ProgramData\Oracle\Java\javapath\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\5a8822b39d40ecfeb5e7e53a1ba98c1a76b61c4362c132af4658e75074dc487d.jar
    1⤵
    • Drops file in Program Files directory
    PID:1204

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/1204-4-0x0000000003030000-0x0000000004030000-memory.dmp

        memory/1204-11-0x0000000002C00000-0x0000000002C01000-memory.dmp

        memory/1204-20-0x0000000003030000-0x0000000004030000-memory.dmp

        memory/1204-27-0x0000000003030000-0x0000000004030000-memory.dmp

        memory/1204-28-0x0000000002C00000-0x0000000002C01000-memory.dmp

        memory/1204-31-0x00000000032B0000-0x00000000032C0000-memory.dmp

        memory/1204-33-0x0000000003030000-0x0000000004030000-memory.dmp

        memory/1204-35-0x0000000003300000-0x0000000003310000-memory.dmp

        memory/1204-32-0x00000000032E0000-0x00000000032F0000-memory.dmp

        memory/1204-34-0x00000000032F0000-0x0000000003300000-memory.dmp

        memory/1204-36-0x0000000003310000-0x0000000003320000-memory.dmp

        memory/1204-37-0x0000000003030000-0x0000000004030000-memory.dmp