Overview

overview

7

Static

static

3

ffdec_21.0...up.exe

windows7-x64

7

ffdec_21.0...up.exe

windows10-2004-x64

7

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

ffdec.bat

windows7-x64

1

ffdec.bat

windows10-2004-x64

7

ffdec.exe

windows7-x64

3

ffdec.exe

windows10-2004-x64

7

ffdec.jar

windows7-x64

1

ffdec.jar

windows10-2004-x64

7

lib/JavactiveX.jar

windows7-x64

1

lib/JavactiveX.jar

windows10-2004-x64

1

lib/LZMA.jar

windows7-x64

1

lib/LZMA.jar

windows10-2004-x64

1

lib/avi.jar

windows7-x64

1

lib/avi.jar

windows10-2004-x64

1

lib/cmykjpeg.jar

windows7-x64

1

lib/cmykjpeg.jar

windows10-2004-x64

1

lib/ddsreader.jar

windows7-x64

1

lib/ddsreader.jar

windows10-2004-x64

1

lib/decimal.jar

windows7-x64

1

lib/decimal.jar

windows10-2004-x64

1

lib/ffdec_lib.jar

windows7-x64

1

lib/ffdec_lib.jar

windows10-2004-x64

1

lib/flamingo-6.2.jar

windows7-x64

1

lib/flamingo-6.2.jar

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    141s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/09/2024, 13:23

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    lib/ffdec_lib.jar

  • Size

    4.5MB

  • MD5

    cc7bbea6d588380b2581ac60b24378c6

  • SHA1

    28f2d85e418fff793ed7bc6af7bec2447a4899d2

  • SHA256

    6ed16396a03725f1080d416d8ccf28f07e39ab5c4302d8424fe38623f5c97d3e

  • SHA512

    e177024b6248744dc132bab9edff66284fdb6ac7acc22ec9c578c9159683daf60685e733d56c4c1ec85f20ce61b0d3fd9d6c8351e8d5ef443a912da4f6c67dc8

  • SSDEEP

    98304:tnfS/B+cz1b8ZM9aNYMh64nmcOoeokIV2jxZXXcYqAZZp6h3xtPKZ:I/8A1+M9aNHh6yOXJ7MNA7UDiZ

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\lib\ffdec_lib.jar
    1⤵
      PID:3048

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3048-2-0x000002453DB20000-0x000002453DD90000-memory.dmp

      Filesize

      2.4MB

      Download

    • memory/3048-11-0x000002453C250000-0x000002453C251000-memory.dmp

      Filesize

      4KB

      Download

    • memory/3048-12-0x000002453DB20000-0x000002453DD90000-memory.dmp

      Filesize

      2.4MB

      Download