Analysis
-
max time kernel
85s -
max time network
75s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
19/11/2024, 11:49
Static task
static1
Behavioral task
behavioral1
Sample
Installer.jar
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Installer.jar
Resource
win10v2004-20241007-en
General
-
Target
Installer.jar
-
Size
18.4MB
-
MD5
eaf63a5d5730fcf1c8cc5cf27354e911
-
SHA1
f22c4b0a9c608ec00b6b84cabe434a240063e642
-
SHA256
f51e4d9f7907dd07ee264439433e0051c5136712cbbb0cc5a81be3b7023df585
-
SHA512
2dca09810b38664f23ca89d72f24e632d5c74874b4d9d0174dce86c30126ee1296a281da768b228840f0160ddb331e48591799799cadbf5a02d294e914a09a80
-
SSDEEP
393216:p6aRouWO9ojV8LJxXlReGOHsxoU+REFJAHYyjFRyHJpy/LAfIiMYX/rQ:PRQ+oqdxVReGksiJL4CFcH2EX/s
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 1736 java.exe -
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\ java.exe Key created \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\ java.exe -
Suspicious use of SetWindowsHookEx 8 IoCs
pid Process 1736 java.exe 1736 java.exe 1736 java.exe 1736 java.exe 1736 java.exe 1736 java.exe 1736 java.exe 1736 java.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
21KB
MD54ca3290a99adadde557930cd481d7539
SHA126034442a76131dd3d37c8f28b6e9bebc7c1fe7c
SHA256dd130c68dc36bcedbe51a6b8ec3b3358a460d45952f6280e12331f48850b6b3b
SHA5129341c60f92dd3f89f82555055924bdae6fcce1e4cd13a7dde5129ebdce04bae377292237a2ed6c3e7623b242e82b01c7ed1717af4d7db8ca473e9fd7b7b190d5