Analysis
- max time kernel
30s - max time network
33s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
- submitted
06/07/2024, 15:33
General
- Target 3eafb74de2ee510948914c85bc60f01044bae17b12055e892c1711abc20fd64b.jar
- Size 203KB
- Sample240706-szpelsshmm
- SHA256 3eafb74de2ee510948914c85bc60f01044bae17b12055e892c1711abc20fd64b
Malware Config
Signatures
- Modifies file permissions 1 TTPs 1 IoCs
- Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -jar C:\Users\Admin\AppData\Local\Temp\3eafb74de2ee510948914c85bc60f01044bae17b12055e892c1711abc20fd64b.jar1⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\icacls.exeC:\Windows\system32\icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant "everyone":(OI)(CI)M2⤵
- Modifies file permissions
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
3903daac9bc4a3b7.timestamp
memory/5012-2-0x0000021000000000-0x0000021000270000-memory.dmp
memory/5012-15-0x0000021000280000-0x0000021000290000-memory.dmp
memory/5012-14-0x0000021000270000-0x0000021000280000-memory.dmp
memory/5012-19-0x00000210002A0000-0x00000210002B0000-memory.dmp
memory/5012-18-0x0000021000290000-0x00000210002A0000-memory.dmp
memory/5012-22-0x00000210002B0000-0x00000210002C0000-memory.dmp
memory/5012-24-0x00000210002C0000-0x00000210002D0000-memory.dmp
memory/5012-26-0x00000210002D0000-0x00000210002E0000-memory.dmp
memory/5012-32-0x00000210002F0000-0x0000021000300000-memory.dmp
memory/5012-33-0x00000210002E0000-0x00000210002F0000-memory.dmp
memory/5012-35-0x000002107A810000-0x000002107A811000-memory.dmp
memory/5012-38-0x0000021000310000-0x0000021000320000-memory.dmp
memory/5012-37-0x0000021000300000-0x0000021000310000-memory.dmp
memory/5012-40-0x0000021000320000-0x0000021000330000-memory.dmp
memory/5012-45-0x0000021000340000-0x0000021000350000-memory.dmp
memory/5012-44-0x0000021000330000-0x0000021000340000-memory.dmp
memory/5012-53-0x0000021000280000-0x0000021000290000-memory.dmp
memory/5012-52-0x0000021000270000-0x0000021000280000-memory.dmp
memory/5012-51-0x0000021000370000-0x0000021000380000-memory.dmp
memory/5012-50-0x0000021000360000-0x0000021000370000-memory.dmp
memory/5012-49-0x0000021000350000-0x0000021000360000-memory.dmp
memory/5012-48-0x0000021000000000-0x0000021000270000-memory.dmp
memory/5012-59-0x0000021000380000-0x0000021000390000-memory.dmp
memory/5012-58-0x00000210002A0000-0x00000210002B0000-memory.dmp
memory/5012-57-0x0000021000290000-0x00000210002A0000-memory.dmp
memory/5012-61-0x00000210002B0000-0x00000210002C0000-memory.dmp
memory/5012-63-0x00000210002C0000-0x00000210002D0000-memory.dmp
memory/5012-64-0x00000210002D0000-0x00000210002E0000-memory.dmp
memory/5012-65-0x00000210002F0000-0x0000021000300000-memory.dmp
memory/5012-66-0x00000210002E0000-0x00000210002F0000-memory.dmp
memory/5012-68-0x0000021000310000-0x0000021000320000-memory.dmp
memory/5012-67-0x0000021000300000-0x0000021000310000-memory.dmp
memory/5012-71-0x0000021000390000-0x00000210003A0000-memory.dmp
memory/5012-70-0x0000021000320000-0x0000021000330000-memory.dmp
memory/5012-73-0x0000021000330000-0x0000021000340000-memory.dmp
memory/5012-76-0x00000210003A0000-0x00000210003B0000-memory.dmp
memory/5012-75-0x0000021000350000-0x0000021000360000-memory.dmp
memory/5012-74-0x0000021000340000-0x0000021000350000-memory.dmp
memory/5012-78-0x00000210003B0000-0x00000210003C0000-memory.dmp
memory/5012-84-0x0000021000380000-0x0000021000390000-memory.dmp
memory/5012-83-0x00000210003D0000-0x00000210003E0000-memory.dmp
memory/5012-82-0x00000210003C0000-0x00000210003D0000-memory.dmp
memory/5012-81-0x0000021000370000-0x0000021000380000-memory.dmp
memory/5012-86-0x00000210003E0000-0x00000210003F0000-memory.dmp
memory/5012-90-0x0000021000400000-0x0000021000410000-memory.dmp
memory/5012-89-0x00000210003F0000-0x0000021000400000-memory.dmp
memory/5012-92-0x0000021000410000-0x0000021000420000-memory.dmp
memory/5012-94-0x0000021000420000-0x0000021000430000-memory.dmp
memory/5012-97-0x0000021000430000-0x0000021000440000-memory.dmp
memory/5012-96-0x0000021000390000-0x00000210003A0000-memory.dmp
memory/5012-100-0x0000021000440000-0x0000021000450000-memory.dmp
memory/5012-99-0x00000210003A0000-0x00000210003B0000-memory.dmp
memory/5012-103-0x00000210003B0000-0x00000210003C0000-memory.dmp
memory/5012-104-0x0000021000450000-0x0000021000460000-memory.dmp
memory/5012-106-0x00000210003C0000-0x00000210003D0000-memory.dmp
memory/5012-108-0x0000021000470000-0x0000021000480000-memory.dmp
memory/5012-107-0x0000021000460000-0x0000021000470000-memory.dmp
memory/5012-111-0x000002107A810000-0x000002107A811000-memory.dmp
memory/5012-114-0x000002107A810000-0x000002107A811000-memory.dmp
memory/5012-129-0x000002107A810000-0x000002107A811000-memory.dmp
memory/5012-132-0x0000021000480000-0x0000021000490000-memory.dmp
memory/5012-131-0x00000210003D0000-0x00000210003E0000-memory.dmp
memory/5012-136-0x0000021000490000-0x00000210004A0000-memory.dmp
memory/5012-135-0x00000210003E0000-0x00000210003F0000-memory.dmp
memory/5012-137-0x00000210003F0000-0x0000021000400000-memory.dmp
memory/5012-138-0x00000210004A0000-0x00000210004B0000-memory.dmp
memory/5012-143-0x00000210004C0000-0x00000210004D0000-memory.dmp
memory/5012-142-0x00000210004B0000-0x00000210004C0000-memory.dmp
memory/5012-141-0x0000021000400000-0x0000021000410000-memory.dmp
memory/5012-145-0x0000021000410000-0x0000021000420000-memory.dmp
memory/5012-146-0x00000210004D0000-0x00000210004E0000-memory.dmp
memory/5012-148-0x0000021000420000-0x0000021000430000-memory.dmp
memory/5012-149-0x00000210004E0000-0x00000210004F0000-memory.dmp
memory/5012-152-0x00000210004F0000-0x0000021000500000-memory.dmp
memory/5012-151-0x0000021000430000-0x0000021000440000-memory.dmp
memory/5012-156-0x0000021000500000-0x0000021000510000-memory.dmp
memory/5012-155-0x0000021000440000-0x0000021000450000-memory.dmp
memory/5012-166-0x000002107A810000-0x000002107A811000-memory.dmp
memory/5012-172-0x000002107A810000-0x000002107A811000-memory.dmp
memory/5012-180-0x0000021000510000-0x0000021000520000-memory.dmp
memory/5012-179-0x0000021000450000-0x0000021000460000-memory.dmp
memory/5012-184-0x0000021000470000-0x0000021000480000-memory.dmp
memory/5012-185-0x0000021000520000-0x0000021000530000-memory.dmp
memory/5012-183-0x0000021000460000-0x0000021000470000-memory.dmp
memory/5012-189-0x0000021000530000-0x0000021000540000-memory.dmp
memory/5012-188-0x0000021000480000-0x0000021000490000-memory.dmp
memory/5012-193-0x0000021000490000-0x00000210004A0000-memory.dmp
memory/5012-197-0x0000021000540000-0x0000021000550000-memory.dmp
memory/5012-196-0x00000210004A0000-0x00000210004B0000-memory.dmp
memory/5012-201-0x0000021000550000-0x0000021000560000-memory.dmp
memory/5012-200-0x00000210004C0000-0x00000210004D0000-memory.dmp
memory/5012-199-0x00000210004B0000-0x00000210004C0000-memory.dmp
memory/5012-205-0x0000021000560000-0x0000021000570000-memory.dmp
memory/5012-204-0x00000210004D0000-0x00000210004E0000-memory.dmp
memory/5012-208-0x00000210004E0000-0x00000210004F0000-memory.dmp
memory/5012-209-0x00000210004F0000-0x0000021000500000-memory.dmp
memory/5012-210-0x0000021000500000-0x0000021000510000-memory.dmp