Analysis

  • max time kernel
    10s
  • max time network
    13s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21/10/2024, 23:20

General

  • Target

    feesa.jar

  • Size

    639KB

  • MD5

    f8efbadc189bc31378bb79f809418cbb

  • SHA1

    b9d08cb99649523e96def357b3407d222422a42e

  • SHA256

    b6c3ed6909c2cef457d966c5bb53e03d48467f05cc1c8c9d144a64f58db97554

  • SHA512

    2e417e788928dc1f1e8db8268147db2ab830a621d6a893bdff153e5270ebbf152c77a5110ff9230371daff67cbd98eff4467858ebfa59629becfbfb56b11e501

  • SSDEEP

    12288:+PD1Q5/P/Z0bx41VI9QPgy/XRL+xzgNKT6gelmRRA3QuA2J0SG5DYm:+PJQ5Z0N4zzPgypmWKT7ItQuNJHG5DYm

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\feesa.jar
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4064

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4064-2-0x000001BC64550000-0x000001BC647C0000-memory.dmp

    Filesize

    2.4MB

  • memory/4064-15-0x000001BC647C0000-0x000001BC647D0000-memory.dmp

    Filesize

    64KB

  • memory/4064-17-0x000001BC647D0000-0x000001BC647E0000-memory.dmp

    Filesize

    64KB

  • memory/4064-19-0x000001BC647E0000-0x000001BC647F0000-memory.dmp

    Filesize

    64KB

  • memory/4064-21-0x000001BC647F0000-0x000001BC64800000-memory.dmp

    Filesize

    64KB

  • memory/4064-23-0x000001BC64800000-0x000001BC64810000-memory.dmp

    Filesize

    64KB

  • memory/4064-25-0x000001BC64810000-0x000001BC64820000-memory.dmp

    Filesize

    64KB

  • memory/4064-29-0x000001BC64820000-0x000001BC64830000-memory.dmp

    Filesize

    64KB

  • memory/4064-30-0x000001BC64830000-0x000001BC64840000-memory.dmp

    Filesize

    64KB

  • memory/4064-27-0x000001BC64530000-0x000001BC64531000-memory.dmp

    Filesize

    4KB

  • memory/4064-34-0x000001BC64530000-0x000001BC64531000-memory.dmp

    Filesize

    4KB

  • memory/4064-35-0x000001BC64550000-0x000001BC647C0000-memory.dmp

    Filesize

    2.4MB

  • memory/4064-36-0x000001BC647C0000-0x000001BC647D0000-memory.dmp

    Filesize

    64KB

  • memory/4064-38-0x000001BC647D0000-0x000001BC647E0000-memory.dmp

    Filesize

    64KB

  • memory/4064-39-0x000001BC647E0000-0x000001BC647F0000-memory.dmp

    Filesize

    64KB

  • memory/4064-40-0x000001BC647F0000-0x000001BC64800000-memory.dmp

    Filesize

    64KB

  • memory/4064-41-0x000001BC64800000-0x000001BC64810000-memory.dmp

    Filesize

    64KB

  • memory/4064-44-0x000001BC64830000-0x000001BC64840000-memory.dmp

    Filesize

    64KB

  • memory/4064-43-0x000001BC64820000-0x000001BC64830000-memory.dmp

    Filesize

    64KB

  • memory/4064-42-0x000001BC64810000-0x000001BC64820000-memory.dmp

    Filesize

    64KB