Analysis
-
max time kernel
92s -
max time network
100s -
platform
windows11-21h2_x64 -
resource
win11-20241007-en -
resource tags
-
submitted
22/10/2024, 22:31
General
-
Target
zararli.jar
-
Size
443KB
-
MD5
c920884d4661a437fabfe9b327270fc1
-
SHA1
a7b5c2521ee8bb7b1b4c26e653a35398b6a2d341
-
SHA256
b499348a0d129cbed646d0c92c25af5f640474ddfc5655ab86ece8e99f6934cf
-
SHA512
33659c9745df93f24161124e9644ae7cefce68d924669ea44c4c93b829b9215a7eb26ff4b89cb96ebb519da59838c486b28c425f64b03bf8f41791468af13435
-
SSDEEP
12288:dZM7f1YoGr1NCSmTSosn5/5kYsTfite02bvzeiDFRC:duT6oGhNKfsnpOfj5DPC
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -jar C:\Users\Admin\AppData\Local\Temp\zararli.jar1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.4MB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.4MB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
2.4MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB