Analysis
- max time kernel
148s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
- submitted
02/06/2024, 16:01
General
- Target DroidJack/DroidJack.jar
- Size 1.5MB
- Sample240602-tf86caha53
- SHA256 e466991f74d8a2d9345d0172b1966d07345b6f315f59ce63a44ad74a62ed1869
Malware Config
Signatures
- Loads dropped DLL 1 IoCs
- Modifies file permissions 1 TTPs 1 IoCs
- Suspicious use of FindShellTrayWindow 3 IoCs
- Suspicious use of SendNotifyMessage 3 IoCs
- Suspicious use of SetWindowsHookEx 3 IoCs
- Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -jar C:\Users\Admin\AppData\Local\Temp\DroidJack\DroidJack.jar1⤵
- Loads dropped DLL
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\icacls.exeC:\Windows\system32\icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant "everyone":(OI)(CI)M2⤵
- Modifies file permissions
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
3903daac9bc4a3b7.timestamp
sqlite-3.7.2-sqlitejdbc.dll
memory/3928-2-0x0000021100000000-0x0000021100270000-memory.dmp
memory/3928-23-0x000002117CEE0000-0x000002117CEE1000-memory.dmp
memory/3928-30-0x0000021100270000-0x0000021100280000-memory.dmp
memory/3928-32-0x000002117CEE0000-0x000002117CEE1000-memory.dmp
memory/3928-39-0x0000021100280000-0x0000021100290000-memory.dmp
memory/3928-47-0x0000021100290000-0x00000211002A0000-memory.dmp
memory/3928-49-0x00000211002A0000-0x00000211002B0000-memory.dmp
memory/3928-51-0x00000211002B0000-0x00000211002C0000-memory.dmp
memory/3928-53-0x00000211002C0000-0x00000211002D0000-memory.dmp
memory/3928-56-0x00000211002D0000-0x00000211002E0000-memory.dmp
memory/3928-60-0x0000021100000000-0x0000021100270000-memory.dmp
memory/3928-63-0x0000021100300000-0x0000021100310000-memory.dmp
memory/3928-64-0x0000021100310000-0x0000021100320000-memory.dmp
memory/3928-62-0x00000211002F0000-0x0000021100300000-memory.dmp
memory/3928-61-0x00000211002E0000-0x00000211002F0000-memory.dmp
memory/3928-66-0x0000021100320000-0x0000021100330000-memory.dmp
memory/3928-69-0x0000021100330000-0x0000021100340000-memory.dmp
memory/3928-70-0x0000021100340000-0x0000021100350000-memory.dmp
memory/3928-73-0x0000021100350000-0x0000021100360000-memory.dmp
memory/3928-72-0x0000021100270000-0x0000021100280000-memory.dmp
memory/3928-76-0x0000021100280000-0x0000021100290000-memory.dmp
memory/3928-79-0x0000021100290000-0x00000211002A0000-memory.dmp
memory/3928-78-0x0000021100370000-0x0000021100380000-memory.dmp
memory/3928-77-0x0000021100360000-0x0000021100370000-memory.dmp
memory/3928-81-0x00000211002A0000-0x00000211002B0000-memory.dmp
memory/3928-82-0x0000021100380000-0x0000021100390000-memory.dmp
memory/3928-84-0x00000211002B0000-0x00000211002C0000-memory.dmp
memory/3928-85-0x0000021100390000-0x00000211003A0000-memory.dmp
memory/3928-90-0x00000211002C0000-0x00000211002D0000-memory.dmp
memory/3928-91-0x00000211003A0000-0x00000211003B0000-memory.dmp
memory/3928-93-0x000002117CEE0000-0x000002117CEE1000-memory.dmp
memory/3928-102-0x000002117CEE0000-0x000002117CEE1000-memory.dmp
memory/3928-107-0x000002117CEE0000-0x000002117CEE1000-memory.dmp
memory/3928-109-0x000002117CEE0000-0x000002117CEE1000-memory.dmp
memory/3928-115-0x00000211003B0000-0x00000211003C0000-memory.dmp
memory/3928-114-0x00000211002D0000-0x00000211002E0000-memory.dmp
memory/3928-123-0x000002117CEE0000-0x000002117CEE1000-memory.dmp
memory/3928-161-0x00000211002E0000-0x00000211002F0000-memory.dmp
memory/3928-164-0x0000021100310000-0x0000021100320000-memory.dmp
memory/3928-163-0x0000021100300000-0x0000021100310000-memory.dmp
memory/3928-162-0x00000211002F0000-0x0000021100300000-memory.dmp
memory/3928-165-0x00000211003C0000-0x00000211003D0000-memory.dmp
memory/3928-176-0x00000211003D0000-0x00000211003E0000-memory.dmp
memory/3928-175-0x0000021100320000-0x0000021100330000-memory.dmp
memory/3928-189-0x00000211003E0000-0x00000211003F0000-memory.dmp
memory/3928-188-0x0000021100340000-0x0000021100350000-memory.dmp
memory/3928-187-0x0000021100330000-0x0000021100340000-memory.dmp
memory/3928-209-0x0000021100350000-0x0000021100360000-memory.dmp
memory/3928-210-0x00000211003F0000-0x0000021100400000-memory.dmp
memory/3928-220-0x0000021100360000-0x0000021100370000-memory.dmp
memory/3928-221-0x0000021100400000-0x0000021100410000-memory.dmp
memory/3928-229-0x0000021100430000-0x0000021100440000-memory.dmp
memory/3928-231-0x0000021100440000-0x0000021100450000-memory.dmp
memory/3928-230-0x0000021100380000-0x0000021100390000-memory.dmp
memory/3928-227-0x0000021100420000-0x0000021100430000-memory.dmp
memory/3928-226-0x0000021100410000-0x0000021100420000-memory.dmp
memory/3928-225-0x0000021100370000-0x0000021100380000-memory.dmp
memory/3928-235-0x0000021100450000-0x0000021100460000-memory.dmp
memory/3928-234-0x0000021100390000-0x00000211003A0000-memory.dmp
memory/3928-238-0x0000021100460000-0x0000021100470000-memory.dmp
memory/3928-237-0x00000211003A0000-0x00000211003B0000-memory.dmp
memory/3928-244-0x0000021100470000-0x0000021100480000-memory.dmp
memory/3928-241-0x00000211003B0000-0x00000211003C0000-memory.dmp
memory/3928-287-0x0000021100480000-0x0000021100490000-memory.dmp
memory/3928-286-0x00000211003C0000-0x00000211003D0000-memory.dmp
memory/3928-291-0x0000021100490000-0x00000211004A0000-memory.dmp
memory/3928-293-0x00000211004A0000-0x00000211004B0000-memory.dmp
memory/3928-292-0x00000211003E0000-0x00000211003F0000-memory.dmp
memory/3928-290-0x00000211003D0000-0x00000211003E0000-memory.dmp
memory/3928-298-0x00000211003F0000-0x0000021100400000-memory.dmp
memory/3928-299-0x00000211004B0000-0x00000211004C0000-memory.dmp
memory/3928-303-0x00000211004C0000-0x00000211004D0000-memory.dmp
memory/3928-302-0x0000021100400000-0x0000021100410000-memory.dmp
memory/3928-311-0x00000211004E0000-0x00000211004F0000-memory.dmp
memory/3928-310-0x00000211004D0000-0x00000211004E0000-memory.dmp
memory/3928-309-0x0000021100440000-0x0000021100450000-memory.dmp
memory/3928-307-0x0000021100420000-0x0000021100430000-memory.dmp
memory/3928-306-0x0000021100410000-0x0000021100420000-memory.dmp
memory/3928-308-0x0000021100430000-0x0000021100440000-memory.dmp
memory/3928-321-0x0000021100530000-0x0000021100540000-memory.dmp
memory/3928-320-0x0000021100520000-0x0000021100530000-memory.dmp
memory/3928-319-0x0000021100510000-0x0000021100520000-memory.dmp
memory/3928-318-0x00000211004F0000-0x0000021100500000-memory.dmp
memory/3928-317-0x0000021100500000-0x0000021100510000-memory.dmp
memory/3928-323-0x0000021100450000-0x0000021100460000-memory.dmp
memory/3928-324-0x0000021100540000-0x0000021100550000-memory.dmp
memory/3928-327-0x0000021100460000-0x0000021100470000-memory.dmp
memory/3928-328-0x0000021100550000-0x0000021100560000-memory.dmp
memory/3928-333-0x0000021100470000-0x0000021100480000-memory.dmp
memory/3928-335-0x0000021100570000-0x0000021100580000-memory.dmp
memory/3928-340-0x0000021100580000-0x0000021100590000-memory.dmp
memory/3928-339-0x0000021100480000-0x0000021100490000-memory.dmp
memory/3928-334-0x0000021100560000-0x0000021100570000-memory.dmp
memory/3928-351-0x00000211005B0000-0x00000211005C0000-memory.dmp
memory/3928-350-0x00000211005A0000-0x00000211005B0000-memory.dmp
memory/3928-346-0x0000021100490000-0x00000211004A0000-memory.dmp
memory/3928-347-0x0000021100590000-0x00000211005A0000-memory.dmp
memory/3928-354-0x00000211005C0000-0x00000211005D0000-memory.dmp
memory/3928-353-0x00000211004A0000-0x00000211004B0000-memory.dmp
memory/3928-359-0x00000211005E0000-0x00000211005F0000-memory.dmp
memory/3928-358-0x00000211004C0000-0x00000211004D0000-memory.dmp
memory/3928-357-0x00000211005D0000-0x00000211005E0000-memory.dmp
memory/3928-356-0x00000211004B0000-0x00000211004C0000-memory.dmp