Analysis

  • max time kernel
    18s
  • max time network
    20s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/10/2024, 20:50

General

  • Target

    pvn6ajjl8nf.jar

  • Size

    2.2MB

  • MD5

    8e48fc3bda0bc899ba7c38b5bd2ac165

  • SHA1

    bff45691858d8278b55b46af99ab0b5890564e53

  • SHA256

    648ca4f9c2964bea3e91685a32e0381c803d648cc358b39ae4071fd3be77fed6

  • SHA512

    a807a35eee990b75d85417bdddc3aabbe1275319ccd982c08b7bd929eb175992b96d7728a4615885b1368c9693550968a899b2d308fc8a0c9c3b1420ad7bc5d0

  • SSDEEP

    49152:J1dxsLIha5XhNN9gD3b+V9JqG+XFpJ7JUZRlwxBRR+IMNT58:JZJhhb+Xqd1DJmR6xHlMU

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 18 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\pvn6ajjl8nf.jar
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:1728

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1728-2-0x0000027EA0E20000-0x0000027EA1090000-memory.dmp

    Filesize

    2.4MB

  • memory/1728-14-0x0000027E9E800000-0x0000027E9E801000-memory.dmp

    Filesize

    4KB

  • memory/1728-19-0x0000027E9E800000-0x0000027E9E801000-memory.dmp

    Filesize

    4KB

  • memory/1728-24-0x0000027EA10A0000-0x0000027EA10B0000-memory.dmp

    Filesize

    64KB

  • memory/1728-23-0x0000027EA1090000-0x0000027EA10A0000-memory.dmp

    Filesize

    64KB

  • memory/1728-26-0x0000027EA10B0000-0x0000027EA10C0000-memory.dmp

    Filesize

    64KB

  • memory/1728-28-0x0000027EA10C0000-0x0000027EA10D0000-memory.dmp

    Filesize

    64KB

  • memory/1728-30-0x0000027EA10D0000-0x0000027EA10E0000-memory.dmp

    Filesize

    64KB

  • memory/1728-32-0x0000027EA10E0000-0x0000027EA10F0000-memory.dmp

    Filesize

    64KB

  • memory/1728-35-0x0000027EA10F0000-0x0000027EA1100000-memory.dmp

    Filesize

    64KB

  • memory/1728-37-0x0000027EA1100000-0x0000027EA1110000-memory.dmp

    Filesize

    64KB

  • memory/1728-46-0x0000027EA1120000-0x0000027EA1130000-memory.dmp

    Filesize

    64KB

  • memory/1728-45-0x0000027EA1110000-0x0000027EA1120000-memory.dmp

    Filesize

    64KB

  • memory/1728-44-0x0000027EA1130000-0x0000027EA1140000-memory.dmp

    Filesize

    64KB

  • memory/1728-48-0x0000027EA1140000-0x0000027EA1150000-memory.dmp

    Filesize

    64KB

  • memory/1728-43-0x0000027EA0E20000-0x0000027EA1090000-memory.dmp

    Filesize

    2.4MB

  • memory/1728-50-0x0000027E9E800000-0x0000027E9E801000-memory.dmp

    Filesize

    4KB

  • memory/1728-53-0x0000027EA1150000-0x0000027EA1160000-memory.dmp

    Filesize

    64KB

  • memory/1728-52-0x0000027EA10A0000-0x0000027EA10B0000-memory.dmp

    Filesize

    64KB

  • memory/1728-51-0x0000027EA1090000-0x0000027EA10A0000-memory.dmp

    Filesize

    64KB

  • memory/1728-56-0x0000027EA1160000-0x0000027EA1170000-memory.dmp

    Filesize

    64KB

  • memory/1728-60-0x0000027EA10B0000-0x0000027EA10C0000-memory.dmp

    Filesize

    64KB

  • memory/1728-61-0x0000027EA1170000-0x0000027EA1180000-memory.dmp

    Filesize

    64KB

  • memory/1728-65-0x0000027EA1180000-0x0000027EA1190000-memory.dmp

    Filesize

    64KB

  • memory/1728-64-0x0000027EA10C0000-0x0000027EA10D0000-memory.dmp

    Filesize

    64KB

  • memory/1728-63-0x0000027E9E800000-0x0000027E9E801000-memory.dmp

    Filesize

    4KB

  • memory/1728-76-0x0000027EA10E0000-0x0000027EA10F0000-memory.dmp

    Filesize

    64KB

  • memory/1728-75-0x0000027EA11A0000-0x0000027EA11B0000-memory.dmp

    Filesize

    64KB

  • memory/1728-74-0x0000027EA1190000-0x0000027EA11A0000-memory.dmp

    Filesize

    64KB

  • memory/1728-73-0x0000027EA10D0000-0x0000027EA10E0000-memory.dmp

    Filesize

    64KB

  • memory/1728-80-0x0000027EA11B0000-0x0000027EA11C0000-memory.dmp

    Filesize

    64KB

  • memory/1728-79-0x0000027EA10F0000-0x0000027EA1100000-memory.dmp

    Filesize

    64KB

  • memory/1728-84-0x0000027EA11C0000-0x0000027EA11D0000-memory.dmp

    Filesize

    64KB

  • memory/1728-83-0x0000027EA1130000-0x0000027EA1140000-memory.dmp

    Filesize

    64KB

  • memory/1728-82-0x0000027EA1100000-0x0000027EA1110000-memory.dmp

    Filesize

    64KB

  • memory/1728-85-0x0000027EA1110000-0x0000027EA1120000-memory.dmp

    Filesize

    64KB

  • memory/1728-87-0x0000027EA11D0000-0x0000027EA11E0000-memory.dmp

    Filesize

    64KB

  • memory/1728-86-0x0000027EA1120000-0x0000027EA1130000-memory.dmp

    Filesize

    64KB

  • memory/1728-90-0x0000027EA11E0000-0x0000027EA11F0000-memory.dmp

    Filesize

    64KB

  • memory/1728-89-0x0000027EA1140000-0x0000027EA1150000-memory.dmp

    Filesize

    64KB

  • memory/1728-99-0x0000027EA11F0000-0x0000027EA1200000-memory.dmp

    Filesize

    64KB

  • memory/1728-98-0x0000027EA1150000-0x0000027EA1160000-memory.dmp

    Filesize

    64KB

  • memory/1728-93-0x0000027EA0720000-0x0000027EA0721000-memory.dmp

    Filesize

    4KB

  • memory/1728-102-0x0000027E9E800000-0x0000027E9E801000-memory.dmp

    Filesize

    4KB

  • memory/1728-103-0x0000027EA1160000-0x0000027EA1170000-memory.dmp

    Filesize

    64KB

  • memory/1728-104-0x0000027EA1170000-0x0000027EA1180000-memory.dmp

    Filesize

    64KB

  • memory/1728-105-0x0000027E9E800000-0x0000027E9E801000-memory.dmp

    Filesize

    4KB

  • memory/1728-107-0x0000027EA1180000-0x0000027EA1190000-memory.dmp

    Filesize

    64KB

  • memory/1728-108-0x0000027EA1190000-0x0000027EA11A0000-memory.dmp

    Filesize

    64KB

  • memory/1728-109-0x0000027EA11A0000-0x0000027EA11B0000-memory.dmp

    Filesize

    64KB

  • memory/1728-110-0x0000027EA1200000-0x0000027EA1210000-memory.dmp

    Filesize

    64KB

  • memory/1728-111-0x0000027EA11B0000-0x0000027EA11C0000-memory.dmp

    Filesize

    64KB

  • memory/1728-113-0x0000027E9E800000-0x0000027E9E801000-memory.dmp

    Filesize

    4KB

  • memory/1728-119-0x0000027EA11C0000-0x0000027EA11D0000-memory.dmp

    Filesize

    64KB

  • memory/1728-120-0x0000027EA1210000-0x0000027EA1220000-memory.dmp

    Filesize

    64KB

  • memory/1728-122-0x0000027EA1220000-0x0000027EA1230000-memory.dmp

    Filesize

    64KB

  • memory/1728-121-0x0000027EA11D0000-0x0000027EA11E0000-memory.dmp

    Filesize

    64KB

  • memory/1728-124-0x0000027EA11E0000-0x0000027EA11F0000-memory.dmp

    Filesize

    64KB

  • memory/1728-125-0x0000027EA1230000-0x0000027EA1240000-memory.dmp

    Filesize

    64KB

  • memory/1728-128-0x0000027EA1240000-0x0000027EA1250000-memory.dmp

    Filesize

    64KB

  • memory/1728-127-0x0000027EA11F0000-0x0000027EA1200000-memory.dmp

    Filesize

    64KB

  • memory/1728-131-0x0000027E9E800000-0x0000027E9E801000-memory.dmp

    Filesize

    4KB

  • memory/1728-134-0x0000027EA1250000-0x0000027EA1260000-memory.dmp

    Filesize

    64KB

  • memory/1728-136-0x0000027EA1200000-0x0000027EA1210000-memory.dmp

    Filesize

    64KB

  • memory/1728-138-0x0000027EA1210000-0x0000027EA1220000-memory.dmp

    Filesize

    64KB

  • memory/1728-139-0x0000027EA1220000-0x0000027EA1230000-memory.dmp

    Filesize

    64KB

  • memory/1728-141-0x0000027EA1230000-0x0000027EA1240000-memory.dmp

    Filesize

    64KB

  • memory/1728-143-0x0000027EA1240000-0x0000027EA1250000-memory.dmp

    Filesize

    64KB