Analysis

  • max time kernel
    139s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13-10-2023 02:52

General

  • Target

    4e01f52192ab0212716a2ac06c4e2eb539b93c3fc08fa429aacc7e683d74b061_JC.jar

  • Size

    218KB

  • MD5

    b03ff6dddff5ea21a129890deab5a9cd

  • SHA1

    89dec8305668280d967a7caeba81b87b0c43926f

  • SHA256

    4e01f52192ab0212716a2ac06c4e2eb539b93c3fc08fa429aacc7e683d74b061

  • SHA512

    7c9c3284bf43366fefb4ba94b6d58eb119427aeebfccb7d47942ff168e711c81887df3d7d29ce542e2134887d7e664612b0c8a8c1e94c3a895d4738563203f4c

  • SSDEEP

    6144:gyepr4uHxtA/7jOhXWnzqRv9TPvLXd6IH2x:KbLACRPFZ6aI

Score
4/10

Malware Config

Signatures

  • Drops file in Program Files directory 12 IoCs

Processes

  • C:\ProgramData\Oracle\Java\javapath\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\4e01f52192ab0212716a2ac06c4e2eb539b93c3fc08fa429aacc7e683d74b061_JC.jar
    1⤵
    • Drops file in Program Files directory
    PID:4500

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4500-2-0x0000000002650000-0x0000000003650000-memory.dmp

    Filesize

    16.0MB

  • memory/4500-11-0x0000000002530000-0x0000000002531000-memory.dmp

    Filesize

    4KB

  • memory/4500-18-0x0000000002650000-0x0000000003650000-memory.dmp

    Filesize

    16.0MB

  • memory/4500-28-0x00000000028D0000-0x00000000028E0000-memory.dmp

    Filesize

    64KB

  • memory/4500-30-0x00000000028F0000-0x0000000002900000-memory.dmp

    Filesize

    64KB

  • memory/4500-31-0x0000000002910000-0x0000000002920000-memory.dmp

    Filesize

    64KB

  • memory/4500-32-0x0000000002650000-0x0000000003650000-memory.dmp

    Filesize

    16.0MB

  • memory/4500-29-0x00000000028E0000-0x00000000028F0000-memory.dmp

    Filesize

    64KB

  • memory/4500-33-0x0000000002920000-0x0000000002930000-memory.dmp

    Filesize

    64KB

  • memory/4500-34-0x0000000002650000-0x0000000003650000-memory.dmp

    Filesize

    16.0MB