Analysis
- max time kernel
139s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20240802-en - resource tags
- submitted
13/08/2024, 01:06
General
- Target 19b5a324a8cbe7237b0cdbea4b24ccaab3de8697bd6e6f55d62243b88f680884.jar
- Size 535KB
- Sample240813-bgflbawcmb
- SHA256 19b5a324a8cbe7237b0cdbea4b24ccaab3de8697bd6e6f55d62243b88f680884
Malware Config
Signatures
- Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
- Enumerates system info in registry 2 TTPs 2 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -jar C:\Users\Admin\AppData\Local\Temp\19b5a324a8cbe7237b0cdbea4b24ccaab3de8697bd6e6f55d62243b88f680884.jar1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2680-2-0x0000029A931A0000-0x0000029A93410000-memory.dmp
memory/2680-21-0x0000029A91920000-0x0000029A91921000-memory.dmp
memory/2680-32-0x0000029A93410000-0x0000029A93420000-memory.dmp
memory/2680-33-0x0000029A93420000-0x0000029A93430000-memory.dmp
memory/2680-35-0x0000029A93430000-0x0000029A93440000-memory.dmp
memory/2680-36-0x0000029A93440000-0x0000029A93450000-memory.dmp
memory/2680-38-0x0000029A93450000-0x0000029A93460000-memory.dmp
memory/2680-40-0x0000029A93460000-0x0000029A93470000-memory.dmp
memory/2680-43-0x0000029A93470000-0x0000029A93480000-memory.dmp
memory/2680-47-0x0000029A91920000-0x0000029A91921000-memory.dmp
memory/2680-49-0x0000029A93480000-0x0000029A93490000-memory.dmp
memory/2680-55-0x0000029A931A0000-0x0000029A93410000-memory.dmp
memory/2680-56-0x0000029A93490000-0x0000029A934A0000-memory.dmp
memory/2680-62-0x0000029A91920000-0x0000029A91921000-memory.dmp
memory/2680-63-0x0000029A91920000-0x0000029A91921000-memory.dmp
memory/2680-64-0x0000029A931A0000-0x0000029A93410000-memory.dmp
memory/2680-73-0x0000029A93490000-0x0000029A934A0000-memory.dmp
memory/2680-72-0x0000029A93480000-0x0000029A93490000-memory.dmp
memory/2680-71-0x0000029A93470000-0x0000029A93480000-memory.dmp
memory/2680-70-0x0000029A93460000-0x0000029A93470000-memory.dmp
memory/2680-69-0x0000029A93450000-0x0000029A93460000-memory.dmp
memory/2680-68-0x0000029A93440000-0x0000029A93450000-memory.dmp
memory/2680-67-0x0000029A93430000-0x0000029A93440000-memory.dmp
memory/2680-66-0x0000029A93420000-0x0000029A93430000-memory.dmp
memory/2680-65-0x0000029A93410000-0x0000029A93420000-memory.dmp