Resubmissions
18/09/2024, 11:17
240918-ndn5haxejf1018/09/2024, 11:06
240918-m7jlfaxbpe1018/09/2024, 10:55
240918-m1jymawhkb10Analysis
- max time kernel
299s - max time network
301s - platform
windows10-2004_x64 - resource
win10v2004-20240802-en - resource tags
- submitted
18/09/2024, 11:06
General
- Target piska.jar
- Size 11.7MB
- Sample240918-m7jlfaxbpe
- SHA256 035df58f5ccdcb81c884cc75ae240d2b3154036891943e320d85fd7e0bd9812f
Malware Config
Signatures
- Adds Run key to start application 2 TTPs 1 IoCs
- Suspicious use of SetWindowsHookEx 5 IoCs
- Suspicious use of WriteProcessMemory 6 IoCs
- Views/modifies file attributes 1 TTPs 1 IoCs
Processes
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -jar C:\Users\Admin\AppData\Local\Temp\piska.jar1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Windows\SYSTEM32\attrib.exeattrib +H C:\Users\Admin\AppData\Roaming\Microsoft\.tmp\1726657592832.tmp2⤵
- Views/modifies file attributes
-
-
C:\Windows\SYSTEM32\cmd.execmd.exe /c "REG ADD HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /v Home /d "C:\Program Files\Java\jre-1.8\bin\javaw.exe -jar C:\Users\Admin\AppData\Roaming\Microsoft\.tmp\1726657592832.tmp" /f"2⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\reg.exeREG ADD HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /v Home /d "C:\Program Files\Java\jre-1.8\bin\javaw.exe -jar C:\Users\Admin\AppData\Roaming\Microsoft\.tmp\1726657592832.tmp" /f3⤵
- Adds Run key to start application
-
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=1036,i,4356837537417149674,16553092232944545509,262144 --variations-seed-version --mojo-platform-channel-handle=3676 /prefetch:81⤵
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
1726657592832.tmp
memory/2732-2-0x00000222F0EF0000-0x00000222F1160000-memory.dmp
memory/2732-15-0x00000222F1160000-0x00000222F1170000-memory.dmp
memory/2732-22-0x00000222F1180000-0x00000222F1190000-memory.dmp
memory/2732-24-0x00000222F11A0000-0x00000222F11B0000-memory.dmp
memory/2732-23-0x00000222F1190000-0x00000222F11A0000-memory.dmp
memory/2732-21-0x00000222F1170000-0x00000222F1180000-memory.dmp
memory/2732-20-0x00000222EF600000-0x00000222EF601000-memory.dmp
memory/2732-26-0x00000222F11B0000-0x00000222F11C0000-memory.dmp
memory/2732-28-0x00000222F11C0000-0x00000222F11D0000-memory.dmp
memory/2732-32-0x00000222F11D0000-0x00000222F11E0000-memory.dmp
memory/2732-37-0x00000222EF600000-0x00000222EF601000-memory.dmp
memory/2732-39-0x00000222F0EF0000-0x00000222F1160000-memory.dmp
memory/2732-40-0x00000222F11E0000-0x00000222F11F0000-memory.dmp
memory/2732-41-0x00000222EF600000-0x00000222EF601000-memory.dmp
memory/2732-43-0x00000222F1160000-0x00000222F1170000-memory.dmp
memory/2732-44-0x00000222F1170000-0x00000222F1180000-memory.dmp
memory/2732-46-0x00000222F1190000-0x00000222F11A0000-memory.dmp
memory/2732-45-0x00000222F1180000-0x00000222F1190000-memory.dmp
memory/2732-47-0x00000222F11A0000-0x00000222F11B0000-memory.dmp
memory/2732-48-0x00000222F11B0000-0x00000222F11C0000-memory.dmp
memory/2732-49-0x00000222F11C0000-0x00000222F11D0000-memory.dmp
memory/2732-50-0x00000222F11D0000-0x00000222F11E0000-memory.dmp
memory/2732-51-0x00000222F11E0000-0x00000222F11F0000-memory.dmp
memory/2732-53-0x00000222EF600000-0x00000222EF601000-memory.dmp
memory/2732-54-0x00000222EF600000-0x00000222EF601000-memory.dmp
memory/2732-57-0x00000222F11F0000-0x00000222F1200000-memory.dmp
memory/2732-61-0x00000222EF600000-0x00000222EF601000-memory.dmp
memory/2732-65-0x00000222F1200000-0x00000222F1210000-memory.dmp
memory/2732-68-0x00000222EF600000-0x00000222EF601000-memory.dmp
memory/2732-71-0x00000222EF600000-0x00000222EF601000-memory.dmp
memory/2732-79-0x00000222EF600000-0x00000222EF601000-memory.dmp
memory/2732-85-0x00000222EF600000-0x00000222EF601000-memory.dmp
memory/2732-89-0x00000222EF600000-0x00000222EF601000-memory.dmp
memory/2732-95-0x00000222EF600000-0x00000222EF601000-memory.dmp
memory/2732-96-0x00000222F1210000-0x00000222F1220000-memory.dmp
memory/2732-104-0x00000222EF600000-0x00000222EF601000-memory.dmp
memory/2732-112-0x00000222F1220000-0x00000222F1230000-memory.dmp
memory/2732-120-0x00000222EF600000-0x00000222EF601000-memory.dmp
memory/2732-121-0x00000222F11F0000-0x00000222F1200000-memory.dmp
memory/2732-122-0x00000222F1200000-0x00000222F1210000-memory.dmp
memory/2732-124-0x00000222F1210000-0x00000222F1220000-memory.dmp
memory/2732-125-0x00000222F1220000-0x00000222F1230000-memory.dmp
memory/2732-127-0x00000222F1230000-0x00000222F1240000-memory.dmp
memory/2732-131-0x00000222F1240000-0x00000222F1250000-memory.dmp
memory/2732-153-0x00000222F1250000-0x00000222F1260000-memory.dmp
memory/2732-155-0x00000222F1260000-0x00000222F1270000-memory.dmp
memory/2732-157-0x00000222F1270000-0x00000222F1280000-memory.dmp
memory/2732-159-0x00000222F1280000-0x00000222F1290000-memory.dmp
memory/2732-161-0x00000222F1290000-0x00000222F12A0000-memory.dmp
memory/2732-163-0x00000222F12A0000-0x00000222F12B0000-memory.dmp
memory/2732-165-0x00000222F12B0000-0x00000222F12C0000-memory.dmp
memory/2732-167-0x00000222F12C0000-0x00000222F12D0000-memory.dmp
memory/2732-170-0x00000222F12D0000-0x00000222F12E0000-memory.dmp
memory/2732-169-0x00000222F1230000-0x00000222F1240000-memory.dmp
memory/2732-175-0x00000222F12F0000-0x00000222F1300000-memory.dmp
memory/2732-177-0x00000222F1250000-0x00000222F1260000-memory.dmp
memory/2732-178-0x00000222F1300000-0x00000222F1310000-memory.dmp
memory/2732-176-0x00000222F12E0000-0x00000222F12F0000-memory.dmp
memory/2732-174-0x00000222F1240000-0x00000222F1250000-memory.dmp
memory/2732-182-0x00000222F1310000-0x00000222F1320000-memory.dmp
memory/2732-181-0x00000222F1260000-0x00000222F1270000-memory.dmp
memory/2732-183-0x00000222F1270000-0x00000222F1280000-memory.dmp
memory/2732-184-0x00000222F1320000-0x00000222F1330000-memory.dmp
memory/2732-186-0x00000222F1280000-0x00000222F1290000-memory.dmp
memory/2732-187-0x00000222F1330000-0x00000222F1340000-memory.dmp
memory/2732-190-0x00000222F1340000-0x00000222F1350000-memory.dmp
memory/2732-189-0x00000222F1290000-0x00000222F12A0000-memory.dmp
memory/2732-192-0x00000222F12A0000-0x00000222F12B0000-memory.dmp
memory/2732-193-0x00000222F1350000-0x00000222F1360000-memory.dmp
memory/2732-196-0x00000222F1360000-0x00000222F1370000-memory.dmp
memory/2732-195-0x00000222F12B0000-0x00000222F12C0000-memory.dmp
memory/2732-199-0x00000222F1370000-0x00000222F1380000-memory.dmp
memory/2732-198-0x00000222F12C0000-0x00000222F12D0000-memory.dmp
memory/2732-202-0x00000222F1380000-0x00000222F1390000-memory.dmp
memory/2732-201-0x00000222F12D0000-0x00000222F12E0000-memory.dmp
memory/2732-205-0x00000222F1390000-0x00000222F13A0000-memory.dmp
memory/2732-204-0x00000222F12F0000-0x00000222F1300000-memory.dmp
memory/2732-209-0x00000222F13A0000-0x00000222F13B0000-memory.dmp
memory/2732-208-0x00000222F1300000-0x00000222F1310000-memory.dmp
memory/2732-212-0x00000222F13B0000-0x00000222F13C0000-memory.dmp
memory/2732-211-0x00000222F1310000-0x00000222F1320000-memory.dmp
memory/2732-215-0x00000222F13C0000-0x00000222F13D0000-memory.dmp
memory/2732-214-0x00000222F1320000-0x00000222F1330000-memory.dmp
memory/2732-217-0x00000222F1330000-0x00000222F1340000-memory.dmp
memory/2732-218-0x00000222F13D0000-0x00000222F13E0000-memory.dmp
memory/2732-222-0x00000222F13E0000-0x00000222F13F0000-memory.dmp
memory/2732-221-0x00000222F1340000-0x00000222F1350000-memory.dmp
memory/2732-224-0x00000222F1350000-0x00000222F1360000-memory.dmp
memory/2732-226-0x00000222F1360000-0x00000222F1370000-memory.dmp
memory/2732-228-0x00000222F1370000-0x00000222F1380000-memory.dmp
memory/2732-229-0x00000222F13F0000-0x00000222F1400000-memory.dmp
memory/2732-231-0x00000222F1380000-0x00000222F1390000-memory.dmp
memory/2732-232-0x00000222F1400000-0x00000222F1410000-memory.dmp
memory/2732-234-0x00000222F1390000-0x00000222F13A0000-memory.dmp
memory/2732-247-0x00000222F13A0000-0x00000222F13B0000-memory.dmp
memory/2732-249-0x00000222F13B0000-0x00000222F13C0000-memory.dmp
memory/2732-250-0x00000222F13C0000-0x00000222F13D0000-memory.dmp
memory/2732-251-0x00000222F13D0000-0x00000222F13E0000-memory.dmp
memory/2732-252-0x00000222F13E0000-0x00000222F13F0000-memory.dmp
memory/2732-253-0x00000222F13F0000-0x00000222F1400000-memory.dmp
memory/2732-254-0x00000222F1400000-0x00000222F1410000-memory.dmp
memory/2732-261-0x00000222F1410000-0x00000222F1420000-memory.dmp
memory/2732-268-0x00000222F1430000-0x00000222F1440000-memory.dmp
memory/2732-269-0x00000222F1420000-0x00000222F1430000-memory.dmp
memory/2732-274-0x00000222F1440000-0x00000222F1450000-memory.dmp
memory/2732-278-0x00000222F1450000-0x00000222F1460000-memory.dmp
memory/2732-279-0x00000222F1410000-0x00000222F1420000-memory.dmp
memory/2732-280-0x00000222F1460000-0x00000222F1470000-memory.dmp
memory/2732-285-0x00000222F1470000-0x00000222F1480000-memory.dmp
memory/2732-284-0x00000222F1430000-0x00000222F1440000-memory.dmp