Analysis
-
max time kernel
141s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
14-06-2024 01:32
Static task
static1
Behavioral task
behavioral1
Sample
14062024_0132_TF-5713011_slip.jar
Resource
win7-20240221-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
14062024_0132_TF-5713011_slip.jar
Resource
win10v2004-20240226-en
3 signatures
150 seconds
General
-
Target
14062024_0132_TF-5713011_slip.jar
-
Size
197KB
-
MD5
598cd01ab9ce7af8a857bbd74ea13685
-
SHA1
3e3d783798770d393625b79dcc2200361132a99a
-
SHA256
acb5e0a1b1b18d85acdef96bcfd74393f846323cd95a6c78a996677c8fd61528
-
SHA512
54ca9ddc2092af2870352c5f13cc914e930831d4755a2dbd3231284726973a09caa4afa184c7585db7f35a5726e1e7cb60e59992fd3b314b1d5abbadec235b6f
-
SSDEEP
1536:aKr7aUP2Hyo1GJnZiUIXAAiflWiQBxwogqrb5cmz09bsJ5RX4+wQ:aGPSyoQJZiSflqX/5cmUk5G+wQ
Score
7/10
Malware Config
Signatures
-
Modifies file permissions 1 TTPs 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
java.exepid process 628 java.exe -
Suspicious use of WriteProcessMemory 2 IoCs
Processes:
java.exedescription pid process target process PID 628 wrote to memory of 1612 628 java.exe icacls.exe PID 628 wrote to memory of 1612 628 java.exe icacls.exe
Processes
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -jar C:\Users\Admin\AppData\Local\Temp\14062024_0132_TF-5713011_slip.jar1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:628 -
C:\Windows\system32\icacls.exeC:\Windows\system32\icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant "everyone":(OI)(CI)M2⤵
- Modifies file permissions
PID:1612
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4444 --field-trial-handle=2248,i,10247514684337323751,15511974759131734137,262144 --variations-seed-version /prefetch:81⤵PID:3352