Analysis
- max time kernel
142s - max time network
147s - platform
windows10-2004_x64 - resource
win10v2004-20230831-en - resource tags
arch:x64arch:x86image:win10v2004-20230831-enlocale:en-usos:windows10-2004-x64system - submitted
01/09/2023, 01:00
Behavioral task
behavioral1
Sample
5a8822b39d40ecfeb5e7e53a1ba98c1a76b61c4362c132af4658e75074dc487d.jar
Resource
win7-20230831-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
5a8822b39d40ecfeb5e7e53a1ba98c1a76b61c4362c132af4658e75074dc487d.jar
Resource
win10v2004-20230831-en
1 signatures
150 seconds
General
- Target 5a8822b39d40ecfeb5e7e53a1ba98c1a76b61c4362c132af4658e75074dc487d.jar
- Size 170KB
- Sample230901-bctx5sbd6v
- SHA256 5a8822b39d40ecfeb5e7e53a1ba98c1a76b61c4362c132af4658e75074dc487d
- MD5 06c02a92d723439a0ab48bc40a7608d3
- SHA1 978c736b5ee77722233bcc0e8318f0cdc733a927
- SHA512 6f2e758657cc32d2e16a3b946675b7d9a427842b9affba6ffbd73ae5fb8c26859adb8e9533dcfa8ad0ee5d05eddc0332c40d52b861c499615821dd9a4a386660
- SSDEEP 3072:aFYpxDousK0EvXzUGla/WFrxttDT/t6RcMoFVOfbBSooZX/nQ29BtfHOLN7g:8Yp1rCEvDUPMVX/t6Rlo/O8/dBVHv
- MD5 SHA1 SHA512 SSDEEP
Score
4/10
Malware Config
Signatures
- Drops file in Program Files directory 12 IoCs
description ioc Process File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\symbols\dll\jvm.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\jvm.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\symbols\dll\jvm.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\ntdll.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\symbols\dll\ntdll.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\ntdll.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\symbols\dll\ntdll.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\dll\jvm.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\dll\jvm.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\dll\ntdll.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\dll\ntdll.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\jvm.pdb java.exe