3af83b9fd6d44e79d3cb01decd565cec0fd5db872de3aec1831babd436fcb226 | Triage

Submit
Reports

Overview

overview

Static

static

testingflr...RV.jar

windows7-x64

1

testingflr...RV.jar

windows10-2004-x64

1

testingflr...02.jar

windows7-x64

1

testingflr...02.jar

windows10-2004-x64

1

testingflr...98.jar

windows7-x64

1

testingflr...98.jar

windows10-2004-x64

1

testingflr....5.jar

windows7-x64

1

testingflr....5.jar

windows10-2004-x64

1

testingflr...lt.jar

windows7-x64

1

testingflr...lt.jar

windows10-2004-x64

1

testingflr...et.exe

windows7-x64

8

testingflr...et.exe

windows10-2004-x64

8

testingflr...r1.exe

windows7-x64

testingflr...r1.exe

windows10-2004-x64

testingflr...ns.jar

windows7-x64

1

testingflr...ns.jar

windows10-2004-x64

1

testingflr...ter.sh

windows7-x64

3

testingflr...ter.sh

windows10-2004-x64

3

testingflr...ka.exe

windows7-x64

8

testingflr...ka.exe

windows10-2004-x64

8

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
18-10-2024 01:20

Sharing

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

testingflrplgpreg-main/DiscordSRV.jar

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

testingflrplgpreg-main/DiscordSRV.jar

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

testingflrplgpreg-main/LuckPerms-Bukkit-5.4.102.jar

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

testingflrplgpreg-main/LuckPerms-Bukkit-5.4.102.jar

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

testingflrplgpreg-main/LuckPerms-Bukkit-5.4.98.jar

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

testingflrplgpreg-main/LuckPerms-Bukkit-5.4.98.jar

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

testingflrplgpreg-main/TAB v4.1.5.jar

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

testingflrplgpreg-main/TAB v4.1.5.jar

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

testingflrplgpreg-main/Vault.jar

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

testingflrplgpreg-main/Vault.jar

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

testingflrplgpreg-main/baks-zapret.exe

Resource

win7-20240903-en

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral12

Sample

testingflrplgpreg-main/baks-zapret.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral13

Sample

testingflrplgpreg-main/connector1.exe

Resource

win7-20240903-en

metasploit backdoor discovery trojan

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral14

Sample

testingflrplgpreg-main/connector1.exe

Resource

win10v2004-20241007-en

metasploit backdoor discovery trojan

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral15

Sample

testingflrplgpreg-main/plug/voidaddons.jar

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

testingflrplgpreg-main/plug/voidaddons.jar

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

testingflrplgpreg-main/starter.sh

Resource

win7-20240903-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral18

Sample

testingflrplgpreg-main/starter.sh

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

testingflrplgpreg-main/zapretka.exe

Resource

win7-20241010-en

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral20

Sample

testingflrplgpreg-main/zapretka.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

11 signatures

150 seconds

Report Analysis Logs

General

Target

testingflrplgpreg-main/DiscordSRV.jar
Size

9.8MB
MD5

1653da0d8ff485ed138bbf3f4c03aa2e
SHA1

f55005317a18ec583a64821cf310b91d8f475c15
SHA256

cc8ee0e5b4a053369095b810a527895ee1357b4f1a9e7c82d769eaf5e4699798
SHA512

d1e43715fbac2a83360057e4760a0e7e70bb26be5621a596ee3c95d718acfb801707e74f0ee1782dbb0f4877eab0159335a61c893dbcdd682752a868af33521f
SSDEEP

196608:8/NArCr09d+JSf2RwXEHMkVdG+Ih6zXsO8tEAMylrhKKUJK:ANAhUJtskS+IgXb8WwlrhxUs

Score

1^/10

Malware Config

Signatures

Processes

C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
java -jar C:\Users\Admin\AppData\Local\Temp\testingflrplgpreg-main\DiscordSRV.jar
1⤵
PID:5072

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/5072-2-0x000001FB58DF0000-0x000001FB59060000-memory.dmp

Filesize
2.4MB

Download
memory/5072-11-0x000001FB57410000-0x000001FB57411000-memory.dmp

Filesize
4KB

Download
memory/5072-12-0x000001FB58DF0000-0x000001FB59060000-memory.dmp

Filesize
2.4MB

Download

© 2018-2024

Terms | Privacy