Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
02/06/2024, 16:01
General
-
Target
DroidJack/DroidJack.jar
-
Size
1.5MB
-
MD5
9ab786c7154b2e24704681de5ed5d7ac
-
SHA1
b1d68ff75291581effc55935914247917435910f
-
SHA256
e466991f74d8a2d9345d0172b1966d07345b6f315f59ce63a44ad74a62ed1869
-
SHA512
92a13592f9f4b7a8214990e57112d0fc3607fe84d44deda5294796ae5bbd5f235d6c467a124b44c5372469dce6e5f9e77b31e45f4da9d9089455b3f6d623990c
-
SSDEEP
12288:HqS40FnjsDB6+awgOUYu+UmZKKjHZVR2dPPzeal8a0VnxcHkUq686P837us9jpSm:7Bg+jEwK8dPPzearfH1q68U8V7SeI6v
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
-
Modifies file permissions 1 TTPs 1 IoCs
-
Suspicious use of FindShellTrayWindow 3 IoCs
-
Suspicious use of SendNotifyMessage 3 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
-
Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -jar C:\Users\Admin\AppData\Local\Temp\DroidJack\DroidJack.jar1⤵
- Loads dropped DLL
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\icacls.exeC:\Windows\system32\icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant "everyone":(OI)(CI)M2⤵
- Modifies file permissions
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
46B
MD5c11b433919e3a74d6bf183fb07a7bcd4
SHA1bc48cbbda0469d4b8290a2d02ccb13abb78733a7
SHA2569f59ee0ab1a1dde8c3f2f6a3d75f803a508ebe0e2469c12fbd0c31c920013c67
SHA51239340327b2639bd3fc39b72a0e7161f9bd47aab5923c43faafb5832b44fe44244f0b23675b5b92e41c62182f3cf26b0cdf2686c43ec4cf1fb1ae8398d1260380
-
Filesize
503KB
MD5e5b43485d986cfeca401f10e9268c85a
SHA1a7001eae35ab841e1deaf5db433c288bd73eaab3
SHA256d73671e898c64fb357766fa06157fee72729c9f3dea55e0abefd23d5c6798022
SHA512fb384ebd312c3e1f0474a2624ef93989851d4c5f29a12dd28d4fd20387179722017e1c8d61d052f22ce449090a8793ea7917ed05a8dfd99c448705359d29fcd8
-
Filesize
2.4MB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.4MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB