Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    145s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/09/2024, 01:27

General

  • Target

    8081b470b90395f8e002ed6807f84b5c5fe2be5dc2fdb6821e2dfbb74665e7fa.jar

  • Size

    9KB

  • MD5

    2feb01c9e214a384d1ffb134e062b7d2

  • SHA1

    11cb6a6d419e38a60c93e63a9ac7d905bf1130ee

  • SHA256

    8081b470b90395f8e002ed6807f84b5c5fe2be5dc2fdb6821e2dfbb74665e7fa

  • SHA512

    1ad77fa84af23fd2eaf6289d5041b3239ac1b58baa65900a1a55fa8deef538ed703ec047de450a580f4a0a53e2bfa0be9d4f8f751dcd53bf3af6c3c3094d672d

  • SSDEEP

    192:oErJ0gV2QFS7FNOByL/PWN6JjuzS+WISlO:xr52QFANl/JzlO

Score
7/10

Malware Config

Signatures

  • Drops startup file 1 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\8081b470b90395f8e002ed6807f84b5c5fe2be5dc2fdb6821e2dfbb74665e7fa.jar
    1⤵
    • Drops startup file
    • Suspicious use of WriteProcessMemory
    PID:1696
    • C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
      java -jar C:\Users\Admin\AppData\Local\java_updater.jar
      2⤵
        PID:4196

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\java_updater.jar

      Filesize

      9KB

      MD5

      fa995358014d19f21e78be53ac1a083b

      SHA1

      8728a9cdf9f16eed48ace42a697ced1cbf90d2c1

      SHA256

      52380b3c126a05279cfd2a553aa13f5fc0ff272d0cfab18767c7ff0b2496ec87

      SHA512

      5bddf053e85421f329483b2af4df1284f870a61021c637365da931acafb9de08c174a688abba7d6e5639aa6dca3ff1d66135c9933f4568e909a2e77fa80b7f13

    • memory/1696-2-0x0000020AA78C0000-0x0000020AA7B30000-memory.dmp

      Filesize

      2.4MB

    • memory/1696-15-0x0000020AA7B40000-0x0000020AA7B50000-memory.dmp

      Filesize

      64KB

    • memory/1696-14-0x0000020AA7B30000-0x0000020AA7B40000-memory.dmp

      Filesize

      64KB

    • memory/1696-17-0x0000020AA7B50000-0x0000020AA7B60000-memory.dmp

      Filesize

      64KB

    • memory/1696-20-0x0000020AA7B60000-0x0000020AA7B70000-memory.dmp

      Filesize

      64KB

    • memory/1696-21-0x0000020AA7B70000-0x0000020AA7B80000-memory.dmp

      Filesize

      64KB

    • memory/1696-24-0x0000020AA7B80000-0x0000020AA7B90000-memory.dmp

      Filesize

      64KB

    • memory/1696-25-0x0000020AA7B90000-0x0000020AA7BA0000-memory.dmp

      Filesize

      64KB

    • memory/1696-30-0x0000020AA78C0000-0x0000020AA7B30000-memory.dmp

      Filesize

      2.4MB

    • memory/1696-29-0x0000020AA7BB0000-0x0000020AA7BC0000-memory.dmp

      Filesize

      64KB

    • memory/1696-28-0x0000020AA7BA0000-0x0000020AA7BB0000-memory.dmp

      Filesize

      64KB

    • memory/1696-32-0x0000020AA7BC0000-0x0000020AA7BD0000-memory.dmp

      Filesize

      64KB

    • memory/1696-35-0x0000020AA7BD0000-0x0000020AA7BE0000-memory.dmp

      Filesize

      64KB

    • memory/1696-34-0x0000020AA7B30000-0x0000020AA7B40000-memory.dmp

      Filesize

      64KB

    • memory/1696-39-0x0000020AA7BE0000-0x0000020AA7BF0000-memory.dmp

      Filesize

      64KB

    • memory/1696-38-0x0000020AA7B40000-0x0000020AA7B50000-memory.dmp

      Filesize

      64KB

    • memory/1696-40-0x0000020AA7B50000-0x0000020AA7B60000-memory.dmp

      Filesize

      64KB

    • memory/1696-41-0x0000020AA7BF0000-0x0000020AA7C00000-memory.dmp

      Filesize

      64KB

    • memory/1696-42-0x0000020AA5FF0000-0x0000020AA5FF1000-memory.dmp

      Filesize

      4KB

    • memory/1696-46-0x0000020AA7C00000-0x0000020AA7C10000-memory.dmp

      Filesize

      64KB

    • memory/1696-45-0x0000020AA7B60000-0x0000020AA7B70000-memory.dmp

      Filesize

      64KB

    • memory/1696-49-0x0000020AA7B70000-0x0000020AA7B80000-memory.dmp

      Filesize

      64KB

    • memory/1696-50-0x0000020AA7B80000-0x0000020AA7B90000-memory.dmp

      Filesize

      64KB

    • memory/1696-52-0x0000020AA7B90000-0x0000020AA7BA0000-memory.dmp

      Filesize

      64KB

    • memory/1696-53-0x0000020AA7C10000-0x0000020AA7C20000-memory.dmp

      Filesize

      64KB

    • memory/1696-57-0x0000020AA7BA0000-0x0000020AA7BB0000-memory.dmp

      Filesize

      64KB

    • memory/1696-61-0x0000020AA7C20000-0x0000020AA7C30000-memory.dmp

      Filesize

      64KB

    • memory/1696-60-0x0000020AA7BB0000-0x0000020AA7BC0000-memory.dmp

      Filesize

      64KB

    • memory/1696-62-0x0000020AA7C30000-0x0000020AA7C40000-memory.dmp

      Filesize

      64KB

    • memory/1696-66-0x0000020AA7C40000-0x0000020AA7C50000-memory.dmp

      Filesize

      64KB

    • memory/1696-65-0x0000020AA7BC0000-0x0000020AA7BD0000-memory.dmp

      Filesize

      64KB

    • memory/1696-68-0x0000020AA7C50000-0x0000020AA7C60000-memory.dmp

      Filesize

      64KB

    • memory/1696-67-0x0000020AA7BD0000-0x0000020AA7BE0000-memory.dmp

      Filesize

      64KB

    • memory/1696-71-0x0000020AA7C60000-0x0000020AA7C70000-memory.dmp

      Filesize

      64KB

    • memory/1696-70-0x0000020AA7BE0000-0x0000020AA7BF0000-memory.dmp

      Filesize

      64KB

    • memory/1696-74-0x0000020AA7C70000-0x0000020AA7C80000-memory.dmp

      Filesize

      64KB

    • memory/1696-73-0x0000020AA7BF0000-0x0000020AA7C00000-memory.dmp

      Filesize

      64KB

    • memory/1696-78-0x0000020AA7C80000-0x0000020AA7C90000-memory.dmp

      Filesize

      64KB

    • memory/1696-77-0x0000020AA7C00000-0x0000020AA7C10000-memory.dmp

      Filesize

      64KB

    • memory/1696-80-0x0000020AA5FF0000-0x0000020AA5FF1000-memory.dmp

      Filesize

      4KB

    • memory/1696-84-0x0000020AA7C90000-0x0000020AA7CA0000-memory.dmp

      Filesize

      64KB

    • memory/1696-86-0x0000020AA7CA0000-0x0000020AA7CB0000-memory.dmp

      Filesize

      64KB

    • memory/1696-90-0x0000020AA7CB0000-0x0000020AA7CC0000-memory.dmp

      Filesize

      64KB

    • memory/1696-89-0x0000020AA7C10000-0x0000020AA7C20000-memory.dmp

      Filesize

      64KB

    • memory/1696-92-0x0000020AA5FF0000-0x0000020AA5FF1000-memory.dmp

      Filesize

      4KB

    • memory/1696-94-0x0000020AA5FF0000-0x0000020AA5FF1000-memory.dmp

      Filesize

      4KB

    • memory/1696-96-0x0000020AA7B30000-0x0000020AA7B40000-memory.dmp

      Filesize

      64KB

    • memory/1696-95-0x0000020AA7B40000-0x0000020AA7B50000-memory.dmp

      Filesize

      64KB

    • memory/1696-97-0x0000020AA78C0000-0x0000020AA7B30000-memory.dmp

      Filesize

      2.4MB

    • memory/1696-120-0x0000020AA7CB0000-0x0000020AA7CC0000-memory.dmp

      Filesize

      64KB

    • memory/1696-119-0x0000020AA7CA0000-0x0000020AA7CB0000-memory.dmp

      Filesize

      64KB

    • memory/1696-118-0x0000020AA7C90000-0x0000020AA7CA0000-memory.dmp

      Filesize

      64KB

    • memory/1696-117-0x0000020AA7C80000-0x0000020AA7C90000-memory.dmp

      Filesize

      64KB

    • memory/1696-116-0x0000020AA7C70000-0x0000020AA7C80000-memory.dmp

      Filesize

      64KB

    • memory/1696-115-0x0000020AA7C60000-0x0000020AA7C70000-memory.dmp

      Filesize

      64KB

    • memory/1696-114-0x0000020AA7C50000-0x0000020AA7C60000-memory.dmp

      Filesize

      64KB

    • memory/1696-113-0x0000020AA7C40000-0x0000020AA7C50000-memory.dmp

      Filesize

      64KB

    • memory/1696-112-0x0000020AA7C30000-0x0000020AA7C40000-memory.dmp

      Filesize

      64KB

    • memory/1696-111-0x0000020AA7C20000-0x0000020AA7C30000-memory.dmp

      Filesize

      64KB

    • memory/1696-110-0x0000020AA7C10000-0x0000020AA7C20000-memory.dmp

      Filesize

      64KB

    • memory/1696-109-0x0000020AA7C00000-0x0000020AA7C10000-memory.dmp

      Filesize

      64KB

    • memory/1696-108-0x0000020AA7BF0000-0x0000020AA7C00000-memory.dmp

      Filesize

      64KB

    • memory/1696-107-0x0000020AA7BE0000-0x0000020AA7BF0000-memory.dmp

      Filesize

      64KB

    • memory/1696-106-0x0000020AA7BD0000-0x0000020AA7BE0000-memory.dmp

      Filesize

      64KB

    • memory/1696-105-0x0000020AA7BC0000-0x0000020AA7BD0000-memory.dmp

      Filesize

      64KB

    • memory/1696-104-0x0000020AA7BB0000-0x0000020AA7BC0000-memory.dmp

      Filesize

      64KB

    • memory/1696-103-0x0000020AA7BA0000-0x0000020AA7BB0000-memory.dmp

      Filesize

      64KB

    • memory/1696-102-0x0000020AA7B90000-0x0000020AA7BA0000-memory.dmp

      Filesize

      64KB

    • memory/1696-101-0x0000020AA7B80000-0x0000020AA7B90000-memory.dmp

      Filesize

      64KB

    • memory/1696-100-0x0000020AA7B70000-0x0000020AA7B80000-memory.dmp

      Filesize

      64KB

    • memory/1696-99-0x0000020AA7B60000-0x0000020AA7B70000-memory.dmp

      Filesize

      64KB

    • memory/1696-98-0x0000020AA7B50000-0x0000020AA7B60000-memory.dmp

      Filesize

      64KB

    • memory/4196-124-0x0000018922900000-0x0000018922B70000-memory.dmp

      Filesize

      2.4MB

    • memory/4196-134-0x00000189228E0000-0x00000189228E1000-memory.dmp

      Filesize

      4KB

    • memory/4196-136-0x0000018922900000-0x0000018922B70000-memory.dmp

      Filesize

      2.4MB