Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
14/05/2024, 18:01
General
-
Target
Aristois-Free.jar
-
Size
6.6MB
-
MD5
4cad86ed173ff0dad198582d86bf62b6
-
SHA1
d25bd59b411076ccc1ed4b4daef78aef093a9d3d
-
SHA256
fbff2ebba99bfa194af533852062c6d60831c7cc3801d4af980c329721484a28
-
SHA512
e233c3ba1b3aeab0e286ad46e7ac4f34ae2207269c7a624bc29d90f14e6ff2dac4d74785414966569ab8da0b2d65d591eadd8884c1989976c361b5ff0c87aea2
-
SSDEEP
196608:N0EY4XwEff0cxykwL9g1leOnAU+1blTRLXKrC05:KYDf8FkHXAU8dJXKrb5
Malware Config
Signatures
-
Loads dropped DLL 2 IoCs
-
Modifies file permissions 1 TTPs 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
-
Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -jar C:\Users\Admin\AppData\Local\Temp\Aristois-Free.jar1⤵
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\icacls.exeC:\Windows\system32\icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant "everyone":(OI)(CI)M2⤵
- Modifies file permissions
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
46B
MD54baae96bc85055c6e0c6c9633ea4f09b
SHA16b41bbbefccf309b96fc9893a2284a669a87d9e5
SHA2569971caa5abcdd202040c46b6841a2d05304e815b679ab54ccadec83e7ba11c9d
SHA51250d88788f95a87be56f1d182afec106554984ca98bc75792b7f6edf88d95d5f67441824bca70bf7b574a05944a8ba21fd913b8d8f7ec321efdcebf93639b9259
-
Filesize
357KB
MD5dad976fafd111ceedc7a473932e9da8f
SHA13c0e8e7fcbc854a87219fbbfd181c2cc76018144
SHA256f61949c469c54a5f4e5a8e1668255b919ee1237f1e568acf4127dda0abcdc9a8
SHA51264801d4d34f130b5ee33d2df3a266e2aed981265d13c6552ab73418471398c49cab9a617647b64298c1de432d078f1a7b830d4330980e7ef10dd15a1d18bda11
-
Filesize
446KB
MD578b8212a157e985fa9d9ee9eaab033bd
SHA10c9b501520c20055ba77bbd8cae4895fcb1cfa40
SHA2561cbc8a197aea7eee710735a57a8cae6c0953ad1fe2cb6e17c2e5afebeb93b5ec
SHA512180dd20b04643d42195a30c28d455c923f395977f7dcb66b1ace85e99c1e3c00906542221092bf6d5465a5fc451d7523df862ab2bc050da3a136a6f635706d80
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.4MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.4MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.4MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB