Analysis
- max time kernel
148s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
- submitted
13/06/2024, 00:03
General
- Target BSTA110H YOM 2016 HBM-NOBAS BG240 TA-5 MACHINE.jar
- Size 9KB
- Sample240613-ab8jgawemb
- SHA256 677fca29350919f6ca9cfbe25d7761c03cb1564b17477a630d7c4454a8956ba7
Malware Config
Signatures
- Modifies file permissions 1 TTPs 1 IoCs
- Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -jar "C:\Users\Admin\AppData\Local\Temp\BSTA110H YOM 2016 HBM-NOBAS BG240 TA-5 MACHINE.jar"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\icacls.exeC:\Windows\system32\icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant "everyone":(OI)(CI)M2⤵
- Modifies file permissions
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
3903daac9bc4a3b7.timestamp
memory/3544-2-0x0000017FC5250000-0x0000017FC54C0000-memory.dmp
memory/3544-15-0x0000017FC54D0000-0x0000017FC54E0000-memory.dmp
memory/3544-14-0x0000017FC54C0000-0x0000017FC54D0000-memory.dmp
memory/3544-19-0x0000017FC54F0000-0x0000017FC5500000-memory.dmp
memory/3544-18-0x0000017FC54E0000-0x0000017FC54F0000-memory.dmp
memory/3544-21-0x0000017FC5500000-0x0000017FC5510000-memory.dmp
memory/3544-26-0x0000017FC5520000-0x0000017FC5530000-memory.dmp
memory/3544-25-0x0000017FC5510000-0x0000017FC5520000-memory.dmp
memory/3544-27-0x0000017FC5530000-0x0000017FC5540000-memory.dmp
memory/3544-29-0x0000017FC5540000-0x0000017FC5550000-memory.dmp
memory/3544-31-0x0000017FC5550000-0x0000017FC5560000-memory.dmp
memory/3544-33-0x0000017FC5560000-0x0000017FC5570000-memory.dmp
memory/3544-37-0x0000017FC5580000-0x0000017FC5590000-memory.dmp
memory/3544-36-0x0000017FC5570000-0x0000017FC5580000-memory.dmp
memory/3544-42-0x0000017FC55A0000-0x0000017FC55B0000-memory.dmp
memory/3544-41-0x0000017FC5590000-0x0000017FC55A0000-memory.dmp
memory/3544-40-0x0000017FC5250000-0x0000017FC54C0000-memory.dmp
memory/3544-43-0x0000017FC5230000-0x0000017FC5231000-memory.dmp
memory/3544-47-0x0000017FC55B0000-0x0000017FC55C0000-memory.dmp
memory/3544-46-0x0000017FC54D0000-0x0000017FC54E0000-memory.dmp
memory/3544-45-0x0000017FC54C0000-0x0000017FC54D0000-memory.dmp
memory/3544-51-0x0000017FC55C0000-0x0000017FC55D0000-memory.dmp
memory/3544-50-0x0000017FC54F0000-0x0000017FC5500000-memory.dmp
memory/3544-49-0x0000017FC54E0000-0x0000017FC54F0000-memory.dmp
memory/3544-54-0x0000017FC55D0000-0x0000017FC55E0000-memory.dmp
memory/3544-53-0x0000017FC5500000-0x0000017FC5510000-memory.dmp
memory/3544-57-0x0000017FC5510000-0x0000017FC5520000-memory.dmp
memory/3544-60-0x0000017FC55F0000-0x0000017FC5600000-memory.dmp
memory/3544-59-0x0000017FC55E0000-0x0000017FC55F0000-memory.dmp
memory/3544-58-0x0000017FC5520000-0x0000017FC5530000-memory.dmp
memory/3544-63-0x0000017FC5600000-0x0000017FC5610000-memory.dmp
memory/3544-62-0x0000017FC5530000-0x0000017FC5540000-memory.dmp
memory/3544-66-0x0000017FC5610000-0x0000017FC5620000-memory.dmp
memory/3544-65-0x0000017FC5540000-0x0000017FC5550000-memory.dmp
memory/3544-69-0x0000017FC5550000-0x0000017FC5560000-memory.dmp
memory/3544-71-0x0000017FC5630000-0x0000017FC5640000-memory.dmp
memory/3544-74-0x0000017FC5560000-0x0000017FC5570000-memory.dmp
memory/3544-76-0x0000017FC5650000-0x0000017FC5660000-memory.dmp
memory/3544-75-0x0000017FC5640000-0x0000017FC5650000-memory.dmp
memory/3544-70-0x0000017FC5620000-0x0000017FC5630000-memory.dmp
memory/3544-81-0x0000017FC5660000-0x0000017FC5670000-memory.dmp
memory/3544-80-0x0000017FC5580000-0x0000017FC5590000-memory.dmp
memory/3544-79-0x0000017FC5570000-0x0000017FC5580000-memory.dmp
memory/3544-87-0x0000017FC5680000-0x0000017FC5690000-memory.dmp
memory/3544-86-0x0000017FC5670000-0x0000017FC5680000-memory.dmp
memory/3544-85-0x0000017FC55A0000-0x0000017FC55B0000-memory.dmp
memory/3544-84-0x0000017FC5590000-0x0000017FC55A0000-memory.dmp
memory/3544-89-0x0000017FC55B0000-0x0000017FC55C0000-memory.dmp
memory/3544-92-0x0000017FC55C0000-0x0000017FC55D0000-memory.dmp
memory/3544-91-0x0000017FC56A0000-0x0000017FC56B0000-memory.dmp
memory/3544-90-0x0000017FC5690000-0x0000017FC56A0000-memory.dmp
memory/3544-95-0x0000017FC56B0000-0x0000017FC56C0000-memory.dmp
memory/3544-94-0x0000017FC55D0000-0x0000017FC55E0000-memory.dmp
memory/3544-96-0x0000017FC5230000-0x0000017FC5231000-memory.dmp
memory/3544-100-0x0000017FC56C0000-0x0000017FC56D0000-memory.dmp
memory/3544-99-0x0000017FC55F0000-0x0000017FC5600000-memory.dmp
memory/3544-98-0x0000017FC55E0000-0x0000017FC55F0000-memory.dmp
memory/3544-104-0x0000017FC5600000-0x0000017FC5610000-memory.dmp
memory/3544-106-0x0000017FC56E0000-0x0000017FC56F0000-memory.dmp
memory/3544-105-0x0000017FC56D0000-0x0000017FC56E0000-memory.dmp
memory/3544-108-0x0000017FC5610000-0x0000017FC5620000-memory.dmp
memory/3544-109-0x0000017FC56F0000-0x0000017FC5700000-memory.dmp
memory/3544-114-0x0000017FC5700000-0x0000017FC5710000-memory.dmp
memory/3544-113-0x0000017FC5630000-0x0000017FC5640000-memory.dmp
memory/3544-112-0x0000017FC5620000-0x0000017FC5630000-memory.dmp
memory/3544-119-0x0000017FC5710000-0x0000017FC5720000-memory.dmp
memory/3544-116-0x0000017FC5640000-0x0000017FC5650000-memory.dmp
memory/3544-117-0x0000017FC5650000-0x0000017FC5660000-memory.dmp
memory/3544-121-0x0000017FC5660000-0x0000017FC5670000-memory.dmp
memory/3544-122-0x0000017FC5720000-0x0000017FC5730000-memory.dmp
memory/3544-125-0x0000017FC5670000-0x0000017FC5680000-memory.dmp
memory/3544-126-0x0000017FC5680000-0x0000017FC5690000-memory.dmp
memory/3544-128-0x0000017FC5740000-0x0000017FC5750000-memory.dmp
memory/3544-127-0x0000017FC5730000-0x0000017FC5740000-memory.dmp
memory/3544-132-0x0000017FC5750000-0x0000017FC5760000-memory.dmp
memory/3544-136-0x0000017FC5770000-0x0000017FC5780000-memory.dmp
memory/3544-135-0x0000017FC5760000-0x0000017FC5770000-memory.dmp
memory/3544-134-0x0000017FC56A0000-0x0000017FC56B0000-memory.dmp
memory/3544-139-0x0000017FC56B0000-0x0000017FC56C0000-memory.dmp
memory/3544-141-0x0000017FC5790000-0x0000017FC57A0000-memory.dmp
memory/3544-140-0x0000017FC5780000-0x0000017FC5790000-memory.dmp
memory/3544-143-0x0000017FC56C0000-0x0000017FC56D0000-memory.dmp
memory/3544-144-0x0000017FC57A0000-0x0000017FC57B0000-memory.dmp
memory/3544-151-0x0000017FC57C0000-0x0000017FC57D0000-memory.dmp
memory/3544-149-0x0000017FC57B0000-0x0000017FC57C0000-memory.dmp
memory/3544-148-0x0000017FC56E0000-0x0000017FC56F0000-memory.dmp
memory/3544-147-0x0000017FC56D0000-0x0000017FC56E0000-memory.dmp
memory/3544-155-0x0000017FC57E0000-0x0000017FC57F0000-memory.dmp
memory/3544-154-0x0000017FC57D0000-0x0000017FC57E0000-memory.dmp
memory/3544-153-0x0000017FC56F0000-0x0000017FC5700000-memory.dmp
memory/3544-157-0x0000017FC5700000-0x0000017FC5710000-memory.dmp
memory/3544-158-0x0000017FC57F0000-0x0000017FC5800000-memory.dmp
memory/3544-161-0x0000017FC5800000-0x0000017FC5810000-memory.dmp
memory/3544-160-0x0000017FC5710000-0x0000017FC5720000-memory.dmp
memory/3544-163-0x0000017FC5720000-0x0000017FC5730000-memory.dmp
memory/3544-164-0x0000017FC5810000-0x0000017FC5820000-memory.dmp
memory/3544-167-0x0000017FC5740000-0x0000017FC5750000-memory.dmp
memory/3544-166-0x0000017FC5730000-0x0000017FC5740000-memory.dmp