Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
135s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
-
submitted
04/06/2024, 14:09
General
-
Target
b1.5_02.jar
-
Size
447KB
-
MD5
edbcec2e58bd5a03954ba7d745dee604
-
SHA1
a17bcc9bcbe0685dd485f9fb15764e85b5888619
-
SHA256
1ec78e3e975aeba33f4bb88b25f9ea4829ef699e2b3a6edaee7a639b0e688bab
-
SHA512
59b394177d5fadf1cb66d48360540d4dd731ece9d48f1fae1a1928ad54790d83758c485dd88a5f788d6f86ad26f7fc2ebe749ad2a38b25c083f44e29d6682950
-
SSDEEP
12288:cXYGH2DGulo+PVf6PlZ7UCZ2qhAH2uB2+42ZhfDl/I4:u2Bh6NiCwiVV2ZXZ
Malware Config
Signatures
-
Modifies file permissions 1 TTPs 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
-
Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -jar C:\Users\Admin\AppData\Local\Temp\b1.5_02.jar1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\icacls.exeC:\Windows\system32\icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant "everyone":(OI)(CI)M2⤵
- Modifies file permissions
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
46B
MD55a0c11e093cd319fadbd828d09425cef
SHA1a777fff6243bd72dda8a2f4b83e4ada453e386f3
SHA25608c619d7eac8ad534f97e6cb7e67af34a95e702ce3927b1fb2911f3e595d0556
SHA5123c17a6d8754ddb62e919b74d932ec47bd02a03054aa98dbc46b80e066f0bcff9a76ccd34c77418b5208e9a504ca241168e98db14d41846613338c85e2f55ec70
-
Filesize
263B
MD5146c2e80bf9c75c6d37167dea4192411
SHA19ca7c23c3b68ce686399d8f96b437b2ef500a5d3
SHA2568df7dc1a7c2da7fd6c9acace05ed0e8c7adb97aa61a348cf020690204bb08a89
SHA5127e58a1687869353c24d522e258117a245eb5229947e82011a0ad59c39bc8338ce81f726e37d1b1b89a31a49615330bae7753b26c0b6e68dd0df5741e518d6e2d
-
Filesize
8B
MD52b5adee4603228857a715ad42e36984a
SHA1fa8bf04456788f15bba3ead6d783fae925cbfbc6
SHA2561df797690c7ad422d0cafe37aec4b40d63bdd51ce0db3623ee0f8691e45551cb
SHA5128f6cedc437874b884a37ddf4b025d55b674108397d10b4a036919f4460b4de8f93998e96ec7abf74117d965473211665070b9a8200de9a376974d00ace961de9
-
Filesize
2.4MB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.4MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB