Overview

overview

7

Static

static

3

ffdec_21.0...up.exe

windows7-x64

7

ffdec_21.0...up.exe

windows10-2004-x64

7

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

ffdec.bat

windows7-x64

1

ffdec.bat

windows10-2004-x64

7

ffdec.exe

windows7-x64

3

ffdec.exe

windows10-2004-x64

7

ffdec.jar

windows7-x64

1

ffdec.jar

windows10-2004-x64

7

lib/JavactiveX.jar

windows7-x64

1

lib/JavactiveX.jar

windows10-2004-x64

1

lib/LZMA.jar

windows7-x64

1

lib/LZMA.jar

windows10-2004-x64

1

lib/avi.jar

windows7-x64

1

lib/avi.jar

windows10-2004-x64

1

lib/cmykjpeg.jar

windows7-x64

1

lib/cmykjpeg.jar

windows10-2004-x64

1

lib/ddsreader.jar

windows7-x64

1

lib/ddsreader.jar

windows10-2004-x64

1

lib/decimal.jar

windows7-x64

1

lib/decimal.jar

windows10-2004-x64

1

lib/ffdec_lib.jar

windows7-x64

1

lib/ffdec_lib.jar

windows10-2004-x64

1

lib/flamingo-6.2.jar

windows7-x64

1

lib/flamingo-6.2.jar

windows10-2004-x64

1

Analysis

  • max time kernel
    143s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/09/2024, 13:23

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    lib/decimal.jar

  • Size

    42KB

  • MD5

    9b7fbce0e41bc9b508b26e2204ac7623

  • SHA1

    92d0f6bb97993193c71330bcc132bfce33c08656

  • SHA256

    feeb9f89f44cd6a921a9a4701358c8c63e3e677424fb2953ddba6e15872c0e91

  • SHA512

    7bb6f5f5c7e1677f8f3a9e37a676a08867e16811e25be050cefbb98768ef758bf4512db7eb94b64eaa6314d170d2d4173b0d7b840f093948041063e647f9459f

  • SSDEEP

    768:kboQ1RmbL8g5OUS3QIPYYpoEyVaMRH+T5d26x8lkwKDdQHJ:kbbmZ5OUuQ4YYpoVVaMRH+FYQVwEdoJ

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\lib\decimal.jar
    1⤵
      PID:1864

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1864-2-0x0000020B8F710000-0x0000020B8F980000-memory.dmp

      Filesize

      2.4MB

      Download

    • memory/1864-11-0x0000020B8DEA0000-0x0000020B8DEA1000-memory.dmp

      Filesize

      4KB

      Download

    • memory/1864-12-0x0000020B8F710000-0x0000020B8F980000-memory.dmp

      Filesize

      2.4MB

      Download