Analysis
- max time kernel
629s - max time network
904s - platform
windows10-1703_x64 - resource
win10-20240404-en - resource tags
- submitted
09/04/2024, 13:34
General
- Target Java Install.jar
- Size 92KB
- Sample240409-qvk6aabe81
- SHA256 16ed7004aa68efab0eda75b3f9bff11508365a4224ef859c91f93029bc441284
Malware Config
Signatures
- Modifies file permissions 1 TTPs 1 IoCs
- Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -jar "C:\Users\Admin\AppData\Local\Temp\Java Install.jar"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\icacls.exeC:\Windows\system32\icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant "everyone":(OI)(CI)M2⤵
- Modifies file permissions
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
3903daac9bc4a3b7.timestamp
memory/3424-84-0x000001C751920000-0x000001C751921000-memory.dmp
memory/3424-12-0x000001C751920000-0x000001C751921000-memory.dmp
memory/3424-18-0x000001C7530F0000-0x000001C7540F0000-memory.dmp
memory/3424-29-0x000001C7530F0000-0x000001C7540F0000-memory.dmp
memory/3424-30-0x000001C751920000-0x000001C751921000-memory.dmp
memory/3424-39-0x000001C7530F0000-0x000001C7540F0000-memory.dmp
memory/3424-49-0x000001C751920000-0x000001C751921000-memory.dmp
memory/3424-50-0x000001C7530F0000-0x000001C7540F0000-memory.dmp
memory/3424-57-0x000001C7530F0000-0x000001C7540F0000-memory.dmp
memory/3424-60-0x000001C7530F0000-0x000001C7540F0000-memory.dmp
memory/3424-66-0x000001C751920000-0x000001C751921000-memory.dmp
memory/3424-68-0x000001C7530F0000-0x000001C7540F0000-memory.dmp
memory/3424-71-0x000001C751920000-0x000001C751921000-memory.dmp
memory/3424-72-0x000001C751920000-0x000001C751921000-memory.dmp
memory/3424-73-0x000001C751920000-0x000001C751921000-memory.dmp
memory/3424-77-0x000001C751920000-0x000001C751921000-memory.dmp
memory/3424-4-0x000001C7530F0000-0x000001C7540F0000-memory.dmp
memory/3424-81-0x000001C751920000-0x000001C751921000-memory.dmp
memory/3424-138-0x000001C7530F0000-0x000001C7540F0000-memory.dmp
memory/3424-102-0x000001C751920000-0x000001C751921000-memory.dmp
memory/3424-110-0x000001C7530F0000-0x000001C7540F0000-memory.dmp
memory/3424-111-0x000001C751920000-0x000001C751921000-memory.dmp
memory/3424-121-0x000001C7530F0000-0x000001C7540F0000-memory.dmp
memory/3424-122-0x000001C7530F0000-0x000001C7540F0000-memory.dmp
memory/3424-124-0x000001C7530F0000-0x000001C7540F0000-memory.dmp
memory/3424-125-0x000001C7530F0000-0x000001C7540F0000-memory.dmp
memory/3424-126-0x000001C7530F0000-0x000001C7540F0000-memory.dmp
memory/3424-134-0x000001C7530F0000-0x000001C7540F0000-memory.dmp
memory/3424-93-0x000001C751920000-0x000001C751921000-memory.dmp
memory/3424-143-0x000001C7530F0000-0x000001C7540F0000-memory.dmp
memory/3424-148-0x000001C7530F0000-0x000001C7540F0000-memory.dmp
memory/3424-160-0x000001C7530F0000-0x000001C7540F0000-memory.dmp
memory/3424-162-0x000001C7530F0000-0x000001C7540F0000-memory.dmp
memory/3424-191-0x000001C7530F0000-0x000001C7540F0000-memory.dmp
memory/3424-192-0x000001C7530F0000-0x000001C7540F0000-memory.dmp
memory/3424-193-0x000001C7530F0000-0x000001C7540F0000-memory.dmp