Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
145s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
06/09/2024, 01:27
Static task
static1
Behavioral task
behavioral1
Sample
8081b470b90395f8e002ed6807f84b5c5fe2be5dc2fdb6821e2dfbb74665e7fa.jar
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
8081b470b90395f8e002ed6807f84b5c5fe2be5dc2fdb6821e2dfbb74665e7fa.jar
Resource
win10v2004-20240802-en
General
-
Target
8081b470b90395f8e002ed6807f84b5c5fe2be5dc2fdb6821e2dfbb74665e7fa.jar
-
Size
9KB
-
MD5
2feb01c9e214a384d1ffb134e062b7d2
-
SHA1
11cb6a6d419e38a60c93e63a9ac7d905bf1130ee
-
SHA256
8081b470b90395f8e002ed6807f84b5c5fe2be5dc2fdb6821e2dfbb74665e7fa
-
SHA512
1ad77fa84af23fd2eaf6289d5041b3239ac1b58baa65900a1a55fa8deef538ed703ec047de450a580f4a0a53e2bfa0be9d4f8f751dcd53bf3af6c3c3094d672d
-
SSDEEP
192:oErJ0gV2QFS7FNOByL/PWN6JjuzS+WISlO:xr52QFANl/JzlO
Malware Config
Signatures
-
Drops startup file 1 IoCs
description ioc Process File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\java_updater.jar.lnk java.exe -
Suspicious use of WriteProcessMemory 2 IoCs
description pid Process procid_target PID 1696 wrote to memory of 4196 1696 java.exe 90 PID 1696 wrote to memory of 4196 1696 java.exe 90
Processes
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -jar C:\Users\Admin\AppData\Local\Temp\8081b470b90395f8e002ed6807f84b5c5fe2be5dc2fdb6821e2dfbb74665e7fa.jar1⤵
- Drops startup file
- Suspicious use of WriteProcessMemory
PID:1696 -
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -jar C:\Users\Admin\AppData\Local\java_updater.jar2⤵PID:4196
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
9KB
MD5fa995358014d19f21e78be53ac1a083b
SHA18728a9cdf9f16eed48ace42a697ced1cbf90d2c1
SHA25652380b3c126a05279cfd2a553aa13f5fc0ff272d0cfab18767c7ff0b2496ec87
SHA5125bddf053e85421f329483b2af4df1284f870a61021c637365da931acafb9de08c174a688abba7d6e5639aa6dca3ff1d66135c9933f4568e909a2e77fa80b7f13