Analysis
- max time kernel
142s - max time network
147s - platform
windows10-2004_x64 - resource
win10v2004-20230831-en - resource tags
arch:x64arch:x86image:win10v2004-20230831-enlocale:en-usos:windows10-2004-x64system - submitted
04/09/2023, 09:25
Behavioral task
behavioral1
Sample
Swift_003001994805009873009940021984003_Bank_of_Baroda_export.jar
Resource
win7-20230831-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Swift_003001994805009873009940021984003_Bank_of_Baroda_export.jar
Resource
win10v2004-20230831-en
1 signatures
150 seconds
General
- Target Swift_003001994805009873009940021984003_Bank_of_Baroda_export.jar
- Size 219KB
- Sample230904-ldly2afa71
- SHA256 c4cd51b66fcc4d76c7f78bcef5efe713d582a28bbf9875265d983be1f7f50716
- MD5 675aa2b049cb9a9cf67a8f8d6685b5ff
- SHA1 4232aa634ead0a682386aa7f627327a4b988fc41
- SHA512 9e6c9a23b0cc6c598bdf7a4076251e81f0b95747c6e7ae1c3b866d19cc18d43a30cfe68f2ad7a3d7f965144f232ed93dcf5a35a6e57cd2cbfacf8bf638fef4c8
- SSDEEP 6144:p0MnkQv7zA5TzTuGPY0z7zMz2T8MMkz40dvxbOA5p:ymzzA5T/H1744dE0r9p
- MD5 SHA1 SHA512 SSDEEP
Score
4/10
Malware Config
Signatures
- Drops file in Program Files directory 12 IoCs
description ioc Process File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\symbols\dll\ntdll.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\dll\ntdll.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\symbols\dll\ntdll.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\dll\jvm.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\symbols\dll\jvm.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\jvm.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\ntdll.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\dll\ntdll.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\jvm.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\dll\jvm.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\symbols\dll\jvm.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\ntdll.pdb java.exe