Resubmissions

18/08/2024, 07:49

240818-jnn52atcjc 1

18/08/2024, 07:44

240818-jk812awejp 3

Analysis

  • max time kernel
    372s
  • max time network
    355s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    18/08/2024, 07:49

General

  • Target

    Auth.jar

  • Size

    12KB

  • MD5

    a8b9d13af0ef0538baa035d6c9e731c9

  • SHA1

    c99413b09d3f7a9ea95565d6e81b99277f7f5616

  • SHA256

    51cd2938b06876ac6c47b61578e3df52ba39b988e1176878260b80bc03082fcd

  • SHA512

    d5ef09f44d9b6dc58bee05b073b52c71e241274644c370999b69d93996a3a8ade6a291244e53274f18a1505c7d891986b9b973e50ed30b37898c905dade5e84b

  • SSDEEP

    192:3X5pS7KTNiB0lUHycM4+39tGzccLsKGS6SGRciaChQu77Al7GEhSX5+WyevRzSao:3zmKT208y5QccPUVhQun3AWyjPx

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\Auth.jar
    1⤵
      PID:2020
    • C:\Windows\System32\rundll32.exe
      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
      1⤵
        PID:3920
      • C:\Program Files\Java\jre-1.8\bin\javaw.exe
        "C:\Program Files\Java\jre-1.8\bin\javaw.exe" -jar "C:\Users\Admin\AppData\Local\Temp\Auth.jar"
        1⤵
          PID:1232
        • C:\Program Files\Java\jre-1.8\bin\javaw.exe
          "C:\Program Files\Java\jre-1.8\bin\javaw.exe" -jar "C:\Users\Admin\AppData\Local\Temp\Auth.jar"
          1⤵
            PID:4060
          • C:\Program Files\Java\jre-1.8\bin\javaw.exe
            "C:\Program Files\Java\jre-1.8\bin\javaw.exe" -jar "C:\Users\Admin\AppData\Local\Temp\Auth.jar"
            1⤵
              PID:704
            • C:\Program Files\Java\jre-1.8\bin\javaw.exe
              "C:\Program Files\Java\jre-1.8\bin\javaw.exe" -jar "C:\Users\Admin\AppData\Local\Temp\Auth.jar"
              1⤵
                PID:4368
              • C:\Program Files\Java\jre-1.8\bin\javaw.exe
                "C:\Program Files\Java\jre-1.8\bin\javaw.exe" -jar "C:\Users\Admin\AppData\Local\Temp\Auth.jar"
                1⤵
                  PID:1432

                Network

                MITRE ATT&CK Matrix

                Replay Monitor

                Loading Replay Monitor...

                Downloads

                • memory/704-50-0x0000019B67E60000-0x0000019B67E61000-memory.dmp

                  Filesize

                  4KB

                • memory/1232-15-0x00000204A5C50000-0x00000204A5EC0000-memory.dmp

                  Filesize

                  2.4MB

                • memory/1232-25-0x00000204A4610000-0x00000204A4611000-memory.dmp

                  Filesize

                  4KB

                • memory/1232-26-0x00000204A5C50000-0x00000204A5EC0000-memory.dmp

                  Filesize

                  2.4MB

                • memory/1432-74-0x000001544F090000-0x000001544F091000-memory.dmp

                  Filesize

                  4KB

                • memory/2020-2-0x0000020C80000000-0x0000020C80270000-memory.dmp

                  Filesize

                  2.4MB

                • memory/2020-11-0x0000020CF9A60000-0x0000020CF9A61000-memory.dmp

                  Filesize

                  4KB

                • memory/2020-12-0x0000020C80000000-0x0000020C80270000-memory.dmp

                  Filesize

                  2.4MB

                • memory/4060-38-0x000001CE4C4A0000-0x000001CE4C4A1000-memory.dmp

                  Filesize

                  4KB

                • memory/4368-62-0x00000248E09D0000-0x00000248E09D1000-memory.dmp

                  Filesize

                  4KB