Overview

overview

7

Static

static

1

NursultanRelease.zip

windows7-x64

1

NursultanRelease.zip

windows10-2004-x64

1

Release/na....1.jar

windows7-x64

1

Release/na....1.jar

windows10-2004-x64

1

Release/na....0.jar

windows7-x64

1

Release/na....0.jar

windows10-2004-x64

1

Release/na....3.jar

windows7-x64

1

Release/na....3.jar

windows10-2004-x64

1

Release/na....2.jar

windows7-x64

1

Release/na....2.jar

windows10-2004-x64

1

Release/na....1.jar

windows7-x64

1

Release/na....1.jar

windows10-2004-x64

1

Release/na...22.jar

windows7-x64

1

Release/na...22.jar

windows10-2004-x64

1

Release/na....2.jar

windows7-x64

1

Release/na....2.jar

windows10-2004-x64

1

Release/na....5.jar

windows7-x64

1

Release/na....5.jar

windows10-2004-x64

1

Release/na....0.jar

windows7-x64

7

Release/na....0.jar

windows10-2004-x64

7

Release/na....3.jar

windows7-x64

1

Release/na....3.jar

windows10-2004-x64

1

Release/na...13.jar

windows7-x64

1

Release/na...13.jar

windows10-2004-x64

1

Release/na....2.jar

windows7-x64

1

Release/na....2.jar

windows10-2004-x64

1

Release/na....0.jar

windows7-x64

1

Release/na....0.jar

windows10-2004-x64

1

Release/na....1.jar

windows7-x64

1

Release/na....1.jar

windows10-2004-x64

1

Release/na....2.jar

windows7-x64

1

Release/na....2.jar

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    137s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    30-09-2024 22:50

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Release/natives/jna-4.4.0.jar

  • Size

    1.0MB

  • MD5

    34d3537524a6c8c134e840e7be601569

  • SHA1

    cb208278274bf12ebdb56c61bd7407e6f774d65a

  • SHA256

    c4dadeeecaa90c8847902082aee5eb107fcf59c5d0e63a17fcaf273c0e2d2bd1

  • SHA512

    d38d124f5d2c227da57b0473bb37709a4d9f6fbcf5b6da3a6e15e2a90e5c2980d9dc649cdaeecb08b376dead73267128c1972d9e25ecc243424b8f6e6f4e67b3

  • SSDEEP

    24576:n4URralwgzl2KYrdk8d1+NV08ctI6wCY+CnErouvUlsYyB:n4G3gz1YrdP78V0buAxpU6v

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Windows\system32\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\Release\natives\jna-4.4.0.jar
    1⤵
    • Loads dropped DLL
    PID:2648

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\jna-63116079\jna4193983391966338873.dll
    Filesize

    240KB

    MD5

    68bf293ed84fec43a17dbc830b6001c1

    SHA1

    e2841508e29f91c168c0a620c57cec387f681a6c

    SHA256

    19e394e5d7a64f1e5063043f6f8d23243db22ff87d67e9e930bd13f8b12bf275

    SHA512

    31679b608c01138c97dd0cb6692a00359e398623097650b72a8f4f2701955232657431df41dc3b1f5681de0c30ae6357d1d8343c6124532f2a067210bd1c9fb8

    Download Submit

  • memory/2648-2-0x00000000025E0000-0x0000000002850000-memory.dmp

    Filesize

    2.4MB

    Download

  • memory/2648-21-0x0000000000140000-0x0000000000141000-memory.dmp

    Filesize

    4KB

    Download

  • memory/2648-22-0x00000000025E0000-0x0000000002850000-memory.dmp

    Filesize

    2.4MB

    Download