Analysis
- max time kernel
149s - max time network
159s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
- submitted
22/11/2024, 03:07
General
- Target Punjb_national_bnk_024_late_return_counta_Inward-clearin_jpg.jar
- Size 190KB
- Sample241122-dmancstkdw
- SHA256 bbd5de9d533b350b86e4d9aa54b6545c6e890c4f263ad27433b2c995faf89493
Malware Config
Signatures
- Drops startup file 1 IoCs
- Adds Run key to start application 2 TTPs 2 IoCs
- Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -jar C:\Users\Admin\AppData\Local\Temp\Punjb_national_bnk_024_late_return_counta_Inward-clearin_jpg.jar1⤵
- Drops startup file
- Adds Run key to start application
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Java\jre-1.8\bin\java.exe"C:\Program Files\Java\jre-1.8\bin\java.exe" -jar "C:\Users\Admin\AppData\Roaming\Punjb_national_bnk_024_late_return_counta_Inward-clearin_jpg.jar"2⤵
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
Punjb_national_bnk_024_late_return_counta_Inward-clearin_jpg.jar
3903daac9bc4a3b7.timestamp
memory/4376-78-0x00000178DC6C0000-0x00000178DC930000-memory.dmp
memory/4376-63-0x00000178DC940000-0x00000178DC950000-memory.dmp
memory/4376-61-0x00000178DC930000-0x00000178DC940000-memory.dmp
memory/4376-91-0x00000178DC9B0000-0x00000178DC9C0000-memory.dmp
memory/4376-90-0x00000178DC9B0000-0x00000178DC9C0000-memory.dmp
memory/4376-88-0x00000178DC9A0000-0x00000178DC9B0000-memory.dmp
memory/4376-87-0x00000178DC990000-0x00000178DC9A0000-memory.dmp
memory/4376-86-0x00000178DC980000-0x00000178DC990000-memory.dmp
memory/4376-85-0x00000178DC970000-0x00000178DC980000-memory.dmp
memory/4376-84-0x00000178DC960000-0x00000178DC970000-memory.dmp
memory/4376-83-0x00000178DC950000-0x00000178DC960000-memory.dmp
memory/4376-82-0x00000178DC940000-0x00000178DC950000-memory.dmp
memory/4376-80-0x00000178DC930000-0x00000178DC940000-memory.dmp
memory/4376-76-0x00000178DAEA0000-0x00000178DAEA1000-memory.dmp
memory/4376-75-0x00000178DC9A0000-0x00000178DC9B0000-memory.dmp
memory/4376-74-0x00000178DC990000-0x00000178DC9A0000-memory.dmp
memory/4376-72-0x00000178DC980000-0x00000178DC990000-memory.dmp
memory/4376-50-0x00000178DC6C0000-0x00000178DC930000-memory.dmp
memory/4376-68-0x00000178DC960000-0x00000178DC970000-memory.dmp
memory/4376-69-0x00000178DC970000-0x00000178DC980000-memory.dmp
memory/4376-65-0x00000178DC950000-0x00000178DC960000-memory.dmp
memory/4876-13-0x000002B900270000-0x000002B900280000-memory.dmp
memory/4876-40-0x000002B900000000-0x000002B900270000-memory.dmp
memory/4876-38-0x000002B900280000-0x000002B900290000-memory.dmp
memory/4876-16-0x000002B900290000-0x000002B9002A0000-memory.dmp
memory/4876-42-0x000002B9002A0000-0x000002B9002B0000-memory.dmp
memory/4876-43-0x000002B9002B0000-0x000002B9002C0000-memory.dmp
memory/4876-44-0x000002B9002C0000-0x000002B9002D0000-memory.dmp
memory/4876-45-0x000002B9002D0000-0x000002B9002E0000-memory.dmp
memory/4876-46-0x000002B9002F0000-0x000002B900300000-memory.dmp
memory/4876-41-0x000002B900290000-0x000002B9002A0000-memory.dmp
memory/4876-2-0x000002B900000000-0x000002B900270000-memory.dmp
memory/4876-18-0x000002B9002A0000-0x000002B9002B0000-memory.dmp
memory/4876-39-0x000002B900270000-0x000002B900280000-memory.dmp
memory/4876-34-0x000002B900000000-0x000002B900270000-memory.dmp
memory/4876-14-0x000002B900280000-0x000002B900290000-memory.dmp
memory/4876-35-0x000002B9002E0000-0x000002B9002F0000-memory.dmp
memory/4876-28-0x000002B9002F0000-0x000002B900300000-memory.dmp
memory/4876-26-0x000002B9002D0000-0x000002B9002E0000-memory.dmp
memory/4876-23-0x000002B9002C0000-0x000002B9002D0000-memory.dmp
memory/4876-22-0x000002B97E560000-0x000002B97E561000-memory.dmp
memory/4876-20-0x000002B9002B0000-0x000002B9002C0000-memory.dmp