Analysis
- max time kernel
140s - max time network
148s - platform
windows10-2004_x64 - resource
win10v2004-20230915-en - resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system - submitted
27/09/2023, 07:56
Behavioral task
behavioral1
Sample
PO2888294Pdf.jar
Resource
win7-20230831-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
PO2888294Pdf.jar
Resource
win10v2004-20230915-en
1 signatures
150 seconds
General
- Target PO2888294Pdf.jar
- Size 219KB
- Sample230927-jsn1tshb2v
- SHA256 575ad544fc34dc750f07593c8b2011e75617fadf569b99c21b4bcbdb1da4b337
- MD5 f7d793ef8a6e83b49801135dcdeb063a
- SHA1 66f806a6f00264eb6c31d1946326b9619680c1e0
- SHA512 1552efff247fcb3096b887a985ac30d013618ed827fd5e8a4184d5531638554804ab9c9d0d7ab560290fe7ba745938d6c167f555b444229ca30349a1bfd3118e
- SSDEEP 3072:+tC4jZpHQYtal60wCoVw/YvrA+ZbiDNyg2M06uc70gQi/RG2QWKuB9Xmabl:NQpHQYtv0RKw+A+Z6gpYNtKu7XL
- MD5 SHA1 SHA512 SSDEEP
Score
4/10
Malware Config
Signatures
- Drops file in Program Files directory 12 IoCs
description ioc Process File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\ntdll.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\dll\ntdll.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\ntdll.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\dll\jvm.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\symbols\dll\jvm.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\jvm.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\dll\jvm.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\symbols\dll\jvm.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\symbols\dll\ntdll.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\dll\ntdll.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\symbols\dll\ntdll.pdb java.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\jvm.pdb java.exe