6e68df42609b8b7b9104a20ddbffefad8339afa4e1667139eace9601e9fa0c58

Analysis

max time kernel
104s
max time network
108s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
19/06/2024, 08:32

Target
JavaSetup8u411.exe
Size 2.2MB
Sample240619-kftafsxdmb
SHA256 6e68df42609b8b7b9104a20ddbffefad8339afa4e1667139eace9601e9fa0c58
MD5 c8e59f75cb74e2a8d644368d5a06ca68
SHA1 562af1976898764ffc35df1d523e98fa95630e8a
SHA512 74a6bd15ed411d3ce70ecd40e71f09aec019752cfc004a1adf5e738ef6a448249d47cca82064c80fdc4ab70a6ce5268bdf0957cbbe6901488728427ea3dde127
SSDEEP 49152:W2+BF5f37D5to87s3Kv3mqI6VeOMjUfkptVxIyijdTB:W2+BFB3X7oMs3Kv3mjUu5SB
MD5 SHA1 SHA512 SSDEEP

Score

4^/10

Executes dropped EXE 1 IoCs

pid	Process
2812	JavaSetup8u411.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1592 wrote to memory of 2812	1592	JavaSetup8u411.exe	82
PID 1592 wrote to memory of 2812	1592	JavaSetup8u411.exe	82
PID 1592 wrote to memory of 2812	1592	JavaSetup8u411.exe	82

C:\Users\Admin\AppData\Local\Temp\JavaSetup8u411.exe
"C:\Users\Admin\AppData\Local\Temp\JavaSetup8u411.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1592
- C:\Users\Admin\AppData\Local\Temp\jds240599109.tmp\JavaSetup8u411.exe
  "C:\Users\Admin\AppData\Local\Temp\jds240599109.tmp\JavaSetup8u411.exe"
  2⤵
  - Executes dropped EXE
  PID:2812

JavaSetup8u411.exe

Path C:\Users\Admin\AppData\Local\Temp\jds240599109.tmp\JavaSetup8u411.exe
Size 1.9MB
SHA256 e37988551194fccbbb82fc0a159a9b9abb242cdaed14a331cbceb0f5195e18f4
MD5 a9b69edaaf925ea6a71679d9a0f56266
SHA1 efe45a8e10c3d559b4800b0974f65bf0e87c747b
SHA512 663f2dc7a6faa7c2a0db5ad3d60b9e0909543b77285a048a1b3c7b20d3cd2a8607202bfc8a0d4b597ec517a7b0ed01f446a4a9c722a750a07f5ece56dff74e23
SSDEEP 49152:55f37D5to87s3Kv3mqI6VeOMjUfkptVxIyijdH:5B3X7oMs3Kv3mjUu5I
MD5 SHA1 SHA512 SSDEEP

Submit Download

jusched.log

Path C:\Users\Admin\AppData\Local\Temp\jusched.log
Size 300KB
SHA256 fc0cc53fe3e7566360f719f4f8846aa81db03260943c6dc7788d74c51c59c2b4
MD5 4a0c0798e9890b7d8ffc967e05ca1123
SHA1 c3689194f581bcb7e1f34bb9d4a3e7fa2188bbcc
SHA512 da4e3f3cd98b72804e68efa4320eb23496287feff6cf22afed9347b1fb630f40f70be0176f3486f2503004ba4cfb974d994bf0bd3493a8bc45a655a06dffd76b
SSDEEP 3072:HEh1sf3XRkcDY8tdSs17Cfq4DJfIIemvBt5hJ7Zarpl/5YFx9vV8fAZlpdpSH9fT:i1EaFvU
MD5 SHA1 SHA512 SSDEEP

Submit Download

jusched.log

Path C:\Users\Admin\AppData\Local\Temp\jusched.log
Size 320KB
SHA256 dab22fcbc250bf70572a3541739b330f8cca3effb2d09093b3b38f3fc59f173c
MD5 3f3842c6c678cffb1795a8d14bec4538
SHA1 a0a207d4bf60ae3f36b37092ae135c380bd78800
SHA512 94e04862c4d714cac46ce56e4f7ad8a0a3cbf78bc3bb2114b7a45e0a7161c0c46ae2eb2926e8dd0dcd6114aefc4c4f37cf22b637fd7af3d0344e7359ac6ba749
SSDEEP 3072:HEh1sf3XRkcDY8tdSs17Cfq4DJfIIemvBt5hJ7Zarpl/5YFx9vV8fAZlpdpSH9fS:i1EaFvD
MD5 SHA1 SHA512 SSDEEP

Submit Download

jusched.log

Path C:\Users\Admin\AppData\Local\Temp\jusched.log
Size 296KB
SHA256 0caa538a70cf6e58b7a3bb5ca3ae5df10a7c52bc63af6a4eaf754c158406e6ad
MD5 95faa9216419f152593fa6fd0b4b4f43
SHA1 31e690b2ff1f911dc5e36d29187561ae109f3762
SHA512 8fffea4fff942c438f7b47dc017129caffdc28cd4229a775f9927035804da2e44da782dd882753eee906a97b692f27e2c888075efe08203067d65ebc6f4c7273
SSDEEP 3072:HEh1sf3XRkcDY8tdSs17Cfq4DJfIIemvBt5hJ7Zarpl/5YFx9vV8fAZlpdpSH9ft:i1EaFv0
MD5 SHA1 SHA512 SSDEEP

Submit Download