Analysis
-
max time kernel
1198s -
max time network
1159s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
26/07/2024, 14:35
Static task
static1
Behavioral task
behavioral1
Sample
315lcksh.jar
Resource
win7-20240708-en
9 signatures
1200 seconds
Behavioral task
behavioral2
Sample
315lcksh.jar
Resource
win10v2004-20240709-en
3 signatures
1200 seconds
General
-
Target
315lcksh.jar
-
Size
2.4MB
-
MD5
edf0126856f19e6673cfa3a47529b72e
-
SHA1
d485dbc83d0d9b19d65b8c3b7d818cfdc644ec52
-
SHA256
e572ff4fe1b68f61503bc840d6574004dbae9416c8bf57fdf3991582711b7d60
-
SHA512
55120aae941c1840d8b9c1bff735ffc715fe76b729f81ddd349dcedb2e25e4669e40016a629639c0c6c5b4ee7f7cba169f351bcca44b35c249fc4b727ae8c565
-
SSDEEP
49152:OvacUC/gc28qqtoaCrptntt+peoCdSUuMGhZtehIXQ7o+ncTa9H:OCfC/9q6oaMHt4pi9up33H+aEH
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe 3304 java.exe -
Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe Token: SeDebugPrivilege 3304 java.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3304 java.exe 3304 java.exe