4e0ddcd303f27c01dcc8a35a9bd821c53fb7dcca474ac7f0c84d3c6451e9f778 | Triage

Submit
Reports

Overview

overview

Static

static

14052163e5...43.exe

windows7-x64

14052163e5...43.exe

windows10-1703-x64

14052163e5...43.exe

windows10-2004-x64

14052163e5...43.exe

windows11-21h2-x64

Antimalwar...ble.js

windows7-x64

8

Antimalwar...ble.js

windows10-1703-x64

8

Antimalwar...ble.js

windows10-2004-x64

8

Antimalwar...ble.js

windows11-21h2-x64

8

EmbraTor M...et.exe

windows7-x64

1

EmbraTor M...et.exe

windows10-1703-x64

1

EmbraTor M...et.exe

windows10-2004-x64

1

EmbraTor M...et.exe

windows11-21h2-x64

1

Java Install.jar

windows7-x64

1

Java Install.jar

windows10-1703-x64

7

Java Install.jar

windows10-2004-x64

7

Java Install.jar

windows11-21h2-x64

7

MsMpEng.js

windows7-x64

MsMpEng.js

windows10-1703-x64

9

MsMpEng.js

windows10-2004-x64

9

MsMpEng.js

windows11-21h2-x64

Windows Dr...on.vbs

windows7-x64

Windows Dr...on.vbs

windows10-1703-x64

Windows Dr...on.vbs

windows10-2004-x64

Windows Dr...on.vbs

windows11-21h2-x64

Resubmissions

09-04-2024 13:34

240409-qvlrtabe9s 10

09-04-2024 13:34

240409-qvk6aabe81 10

09-04-2024 13:33

240409-qthzjabe5z 10

09-04-2024 13:33

240409-qthc1abe5y 10

07-07-2023 11:45

230707-nw632ahf6w 10

Analysis

max time kernel
297s
max time network
302s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
09-04-2024 13:33

Sharing

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

14052163e50c197697c64b143.exe

Resource

win7-20240220-en

strrat evasion persistence stealer trojan

windows7-x64

20 signatures

300 seconds

Behavioral task

behavioral2

Sample

14052163e50c197697c64b143.exe

Resource

win10-20240404-en

strrat discovery evasion persistence stealer trojan

windows10-1703-x64

20 signatures

300 seconds

Behavioral task

behavioral3

Sample

14052163e50c197697c64b143.exe

Resource

win10v2004-20240226-en

strrat discovery evasion persistence stealer trojan

windows10-2004-x64

26 signatures

300 seconds

Behavioral task

behavioral4

Sample

14052163e50c197697c64b143.exe

Resource

win11-20240221-en

strrat xmrig discovery evasion miner persistence stealer trojan

windows11-21h2-x64

28 signatures

300 seconds

Behavioral task

behavioral5

Sample

Antimalware Service Executable.js

Resource

win7-20240220-en

windows7-x64

6 signatures

300 seconds

Behavioral task

behavioral6

Sample

Antimalware Service Executable.js

Resource

win10-20240404-en

windows10-1703-x64

6 signatures

300 seconds

Behavioral task

behavioral7

Sample

Antimalware Service Executable.js

Resource

win10v2004-20240226-en

windows10-2004-x64

7 signatures

300 seconds

Behavioral task

behavioral8

Sample

Antimalware Service Executable.js

Resource

win11-20240221-en

windows11-21h2-x64

6 signatures

300 seconds

Behavioral task

behavioral9

Sample

EmbraTor Mac Smash Bullet.exe

Resource

win7-20240221-en

windows7-x64

1 signatures

300 seconds

Behavioral task

behavioral10

Sample

EmbraTor Mac Smash Bullet.exe

Resource

win10-20240404-en

windows10-1703-x64

1 signatures

300 seconds

Behavioral task

behavioral11

Sample

EmbraTor Mac Smash Bullet.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral12

Sample

EmbraTor Mac Smash Bullet.exe

Resource

win11-20240221-en

windows11-21h2-x64

1 signatures

300 seconds

Behavioral task

behavioral13

Sample

Java Install.jar

Resource

win7-20240221-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral14

Sample

Java Install.jar

Resource

win10-20240404-en

windows10-1703-x64

2 signatures

300 seconds

Behavioral task

behavioral15

Sample

Java Install.jar

Resource

win10v2004-20240226-en

windows10-2004-x64

3 signatures

300 seconds

Behavioral task

behavioral16

Sample

Java Install.jar

Resource

win11-20240221-en

windows11-21h2-x64

3 signatures

300 seconds

Behavioral task

behavioral17

Sample

MsMpEng.js

Resource

win7-20231129-en

xmrig evasion miner

windows7-x64

19 signatures

300 seconds

Behavioral task

behavioral18

Sample

MsMpEng.js

Resource

win10-20240404-en

windows10-1703-x64

12 signatures

300 seconds

Behavioral task

behavioral19

Sample

MsMpEng.js

Resource

win10v2004-20240226-en

windows10-2004-x64

16 signatures

300 seconds

Behavioral task

behavioral20

Sample

MsMpEng.js

Resource

win11-20240221-en

xmrig evasion miner

windows11-21h2-x64

20 signatures

300 seconds

Behavioral task

behavioral21

Sample

Windows Driver Foundation.vbs

Resource

win7-20240221-en

windows7-x64

4 signatures

300 seconds

Behavioral task

behavioral22

Sample

Windows Driver Foundation.vbs

Resource

win10-20240404-en

windows10-1703-x64

5 signatures

300 seconds

Behavioral task

behavioral23

Sample

Windows Driver Foundation.vbs

Resource

win10v2004-20240319-en

windows10-2004-x64

6 signatures

300 seconds

Behavioral task

behavioral24

Sample

Windows Driver Foundation.vbs

Resource

win11-20240221-en

windows11-21h2-x64

5 signatures

300 seconds

Report Analysis Logs

General

Target

Java Install.jar
Size

92KB
MD5

c55f9247eb8ea19af96292f0893f86b5
SHA1

bd5e6884b8151114af7e45a92525893f4d2aaabd
SHA256

16ed7004aa68efab0eda75b3f9bff11508365a4224ef859c91f93029bc441284
SHA512

3efab4ee9e3c9d81efd4e2f164c0a2ae72f688cbd0068cc44a063bf4787ba65b8d2a644ac2f7704fbd059d0ba96665aeff46c2bfba820fb42df06eea7e87ccdb
SSDEEP

1536:QL/61A/qP1+9Qc1+jxjciQnGSzPsRBo0fpL9mjMT8mMhe3gnHGvPvxKpjHr9Uy:QLn/qP1CQpjEGyP0Bxf99mYTX3gmvKLn

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\java.exe
java -jar "C:\Users\Admin\AppData\Local\Temp\Java Install.jar"
1⤵
PID:1444

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1444-9-0x00000000021C0000-0x00000000051C0000-memory.dmp

Filesize
48.0MB

Download
memory/1444-10-0x0000000001C50000-0x0000000001C51000-memory.dmp

Filesize
4KB

Download
memory/1444-17-0x0000000001C50000-0x0000000001C51000-memory.dmp

Filesize
4KB

Download
memory/1444-21-0x0000000001C50000-0x0000000001C51000-memory.dmp

Filesize
4KB

Download
memory/1444-26-0x0000000001C50000-0x0000000001C51000-memory.dmp

Filesize
4KB

Download
memory/1444-29-0x0000000001C50000-0x0000000001C51000-memory.dmp

Filesize
4KB

Download
memory/1444-33-0x0000000001C50000-0x0000000001C51000-memory.dmp

Filesize
4KB

Download
memory/1444-34-0x0000000001C50000-0x0000000001C51000-memory.dmp

Filesize
4KB

Download
memory/1444-39-0x0000000001C50000-0x0000000001C51000-memory.dmp

Filesize
4KB

Download
memory/1444-53-0x0000000001C50000-0x0000000001C51000-memory.dmp

Filesize
4KB

Download
memory/1444-59-0x0000000001C50000-0x0000000001C51000-memory.dmp

Filesize
4KB

Download
memory/1444-62-0x00000000021C0000-0x00000000051C0000-memory.dmp

Filesize
48.0MB

Download
memory/1444-66-0x0000000001C50000-0x0000000001C51000-memory.dmp

Filesize
4KB

Download
memory/1444-77-0x0000000001C50000-0x0000000001C51000-memory.dmp

Filesize
4KB

Download

© 2018-2025

Terms | Privacy