Analysis

  • max time kernel
    127s
  • max time network
    147s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240802-en
  • resource tags

    arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    25-08-2024 01:16

General

  • Target

    bin/EaglerGradle

  • Size

    9KB

  • MD5

    79bbd48605632a6c91ecb3d0f19ddcdc

  • SHA1

    219c6357a976e2061e037551d4ee9bc07cc1505e

  • SHA256

    5ffbce8265e0b0833d37bf6ce016593d8707aa78ee650abca58dd1ef5e593252

  • SHA512

    d0f63feb39087ab879bcb7a3b71c7fd17029967c860d30f74b59434b4aec28d2cdd64c270ec904ddc1c6ec56edc3d69588139428e732d11d7f1e1db7e28b5258

  • SSDEEP

    192:SyWm7HbcHczJ1XnRy/6MQWfhI+vQzkxgrxubXjHI75FwRKe8q5WL:S/mVzJZRyiufhbbgXFwRuaq

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\bin\EaglerGradle
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3448
    • C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
      java.exe -version
      2⤵
        PID:2216
      • C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
        "java.exe" "-Djava.library.path=versions/1.12/1.12-natives" -classpath "C:\Users\Admin\AppData\Local\Temp\lib\EaglerGradle-1.0.0.jar;C:\Users\Admin\AppData\Local\Temp\lib\patchy-1.1.jar;C:\Users\Admin\AppData\Local\Temp\lib\oshi-core-1.1.jar;C:\Users\Admin\AppData\Local\Temp\lib\jna-4.4.0.jar;C:\Users\Admin\AppData\Local\Temp\lib\platform-3.4.0.jar;C:\Users\Admin\AppData\Local\Temp\lib\icu4j-core-mojang-51.2.jar;C:\Users\Admin\AppData\Local\Temp\lib\jopt-simple-5.0.3.jar;C:\Users\Admin\AppData\Local\Temp\lib\codecjorbis-20101023.jar;C:\Users\Admin\AppData\Local\Temp\lib\codecwav-20101023.jar;C:\Users\Admin\AppData\Local\Temp\lib\libraryjavasound-20101123.jar;C:\Users\Admin\AppData\Local\Temp\lib\librarylwjglopenal-20100824.jar;C:\Users\Admin\AppData\Local\Temp\lib\soundsystem-20120107.jar;C:\Users\Admin\AppData\Local\Temp\lib\netty-all-4.1.9.Final.jar;C:\Users\Admin\AppData\Local\Temp\lib\guava-21.0.jar;C:\Users\Admin\AppData\Local\Temp\lib\commons-lang3-3.5.jar;C:\Users\Admin\AppData\Local\Temp\lib\commons-io-2.5.jar;C:\Users\Admin\AppData\Local\Temp\lib\commons-codec-1.10.jar;C:\Users\Admin\AppData\Local\Temp\lib\jinput-2.0.5.jar;C:\Users\Admin\AppData\Local\Temp\lib\jutils-1.0.0.jar;C:\Users\Admin\AppData\Local\Temp\lib\gson-2.8.0.jar;C:\Users\Admin\AppData\Local\Temp\lib\authlib-1.5.25.jar;C:\Users\Admin\AppData\Local\Temp\lib\commons-compress-1.8.1.jar;C:\Users\Admin\AppData\Local\Temp\lib\httpclient-4.3.3.jar;C:\Users\Admin\AppData\Local\Temp\lib\commons-logging-1.1.3.jar;C:\Users\Admin\AppData\Local\Temp\lib\httpcore-4.3.2.jar;C:\Users\Admin\AppData\Local\Temp\lib\fastutil-7.1.0.jar;C:\Users\Admin\AppData\Local\Temp\lib\log4j-api-2.8.1.jar;C:\Users\Admin\AppData\Local\Temp\lib\log4j-core-2.8.1.jar;C:\Users\Admin\AppData\Local\Temp\lib\lwjgl-2.9.4-nightly-20150209.jar;C:\Users\Admin\AppData\Local\Temp\lib\lwjgl_util-2.9.4-nightly-20150209.jar;C:\Users\Admin\AppData\Local\Temp\lib\jsr305-3.0.1.jar;C:\Users\Admin\AppData\Local\Temp\lib\vecmath-1.5.2.jar;C:\Users\Admin\AppData\Local\Temp\lib\1.12.jar" Start
        2⤵
          PID:816

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • C:\ProgramData\Oracle\Java\.oracle_jre_usage\3903daac9bc4a3b7.timestamp

        Filesize

        46B

        MD5

        0d987841e04042c153417d4c0c7c584b

        SHA1

        09f22f21dc27929fa0415599776c6b72993e64c3

        SHA256

        f16124863af0ae5ee523e80d50a3893530c8584605677f75447f15cb278628b6

        SHA512

        c923623700d93e118d798e1867d5401134c6891a0a6b8a319b7e80f1abf70311218996b2142da7eec69205e5d4e55f303331174a21c233d68bed7de60a1889fb

      • memory/816-16-0x000002C835380000-0x000002C8355F0000-memory.dmp

        Filesize

        2.4MB

      • memory/816-27-0x000002C835360000-0x000002C835361000-memory.dmp

        Filesize

        4KB

      • memory/816-28-0x000002C835380000-0x000002C8355F0000-memory.dmp

        Filesize

        2.4MB

      • memory/2216-2-0x000001DE42920000-0x000001DE42B90000-memory.dmp

        Filesize

        2.4MB

      • memory/2216-12-0x000001DE40F20000-0x000001DE40F21000-memory.dmp

        Filesize

        4KB

      • memory/2216-13-0x000001DE42920000-0x000001DE42B90000-memory.dmp

        Filesize

        2.4MB