General
-
Target
jre-8u391-windows-x64.exe
-
Size
64.4MB
-
Sample
240322-srp16sdb33
-
MD5
befbeb437d2f2655509b8bd5af95afa0
-
SHA1
fa1615c38ae35e2eec4f6cc666f0bb3ea22d04c8
-
SHA256
a7f72136d77af4947de1ce4660d79eae29a9782cc965dd0fd2d9dab87716ea67
-
SHA512
a8b33c5896f934f201b9d3d273ea4917720a190d81b98569f460742c36d2e66117e77b7810d57b56fe3c15cc606539cf5eabac3cebc2026c0cd6eb1a4d765aa5
-
SSDEEP
1572864:f3f7LEgZJC0lEsp3D1j476iZZlw5yw4b0LucoHbjt0Wc:f3fxZ7lEwT1ji6iZHw5ywor7jt0f
Static task
static1
Behavioral task
behavioral1
Sample
jre-8u391-windows-x64.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
jre-8u391-windows-x64.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
jre-8u391-windows-x64.exe
-
Size
64.4MB
-
MD5
befbeb437d2f2655509b8bd5af95afa0
-
SHA1
fa1615c38ae35e2eec4f6cc666f0bb3ea22d04c8
-
SHA256
a7f72136d77af4947de1ce4660d79eae29a9782cc965dd0fd2d9dab87716ea67
-
SHA512
a8b33c5896f934f201b9d3d273ea4917720a190d81b98569f460742c36d2e66117e77b7810d57b56fe3c15cc606539cf5eabac3cebc2026c0cd6eb1a4d765aa5
-
SSDEEP
1572864:f3f7LEgZJC0lEsp3D1j476iZZlw5yw4b0LucoHbjt0Wc:f3fxZ7lEwT1ji6iZHw5ywor7jt0f
Score6/10-
Blocklisted process makes network request
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Browser Extensions
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Modify Registry
3Subvert Trust Controls
1Install Root Certificate
1