Analysis
-
max time kernel
147s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
20/03/2024, 02:09
General
-
Target
2e2dea44f85ff4988ed8ddfcee37cc0e4ec9eadb941222eb8afae8a8358b892c.jar
-
Size
178KB
-
MD5
6c4517de2d20c07218aacd670022ad00
-
SHA1
78d0f64fc0f4c5d6902762bbe514a7e1af8708d1
-
SHA256
2e2dea44f85ff4988ed8ddfcee37cc0e4ec9eadb941222eb8afae8a8358b892c
-
SHA512
09a2171864e03ac9b2415fece8f3a7c7890480adde3418325231d4c965e227229dc997de9fa4071a3f8fe1040971e0aed852a1aa61a9e7753dd1ddb80e04caeb
-
SSDEEP
3072:iM9ZDCAIY6kppdX3UivK8V4Elu1n4M1vnYivy3LdCi0oUGGKp2iEYLpNj7bFDm:iMDLIk/dnU1x4M1PYivxATFLPbFq
Score
7/10
Malware Config
Signatures
-
Modifies file permissions 1 TTPs 1 IoCs
-
Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -jar C:\Users\Admin\AppData\Local\Temp\2e2dea44f85ff4988ed8ddfcee37cc0e4ec9eadb941222eb8afae8a8358b892c.jar1⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\icacls.exeC:\Windows\system32\icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant "everyone":(OI)(CI)M2⤵
- Modifies file permissions
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16.0MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
16.0MB
-
Filesize
16.0MB
-
Filesize
16.0MB
-
Filesize
16.0MB
-
Filesize
16.0MB
-
Filesize
16.0MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
16.0MB
-
Filesize
16.0MB
-
Filesize
16.0MB
-
Filesize
16.0MB
-
Filesize
16.0MB