Overview

overview

10

Static

static

10

lib1/activation.jar

windows7-x64

1

lib1/activation.jar

windows10-2004-x64

1

lib1/antlr...me.jar

windows7-x64

1

lib1/antlr...me.jar

windows10-2004-x64

1

lib1/asm-all.jar

windows7-x64

1

lib1/asm-all.jar

windows10-2004-x64

1

lib1/commo...il.jar

windows7-x64

1

lib1/commo...il.jar

windows10-2004-x64

1

lib1/conne...pi.jar

windows7-x64

1

lib1/conne...pi.jar

windows10-2004-x64

1

lib1/dn-co...le.jar

windows7-x64

1

lib1/dn-co...le.jar

windows10-2004-x64

1

lib1/dn-php-sdk.jar

windows7-x64

1

lib1/dn-php-sdk.jar

windows10-2004-x64

1

lib1/dyn4j.jar

windows7-x64

1

lib1/dyn4j.jar

windows10-2004-x64

1

lib1/gson.jar

windows7-x64

1

lib1/gson.jar

windows10-2004-x64

1

lib1/jaybi...18.jar

windows7-x64

1

lib1/jaybi...18.jar

windows10-2004-x64

1

lib1/jfoenix.jar

windows7-x64

1

lib1/jfoenix.jar

windows10-2004-x64

1

lib1/jkeymaster.jar

windows7-x64

1

lib1/jkeymaster.jar

windows10-2004-x64

1

lib1/jna.jar

windows7-x64

7

lib1/jna.jar

windows10-2004-x64

7

lib1/jphp-...rk.jar

windows7-x64

1

lib1/jphp-...rk.jar

windows10-2004-x64

1

lib1/jphp-core.jar

windows7-x64

1

lib1/jphp-core.jar

windows10-2004-x64

1

lib1/jphp-...xt.jar

windows7-x64

1

lib1/jphp-...xt.jar

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    05-01-2025 19:30

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    lib1/jphp-core.jar

  • Size

    464KB

  • MD5

    7e5e3d6d352025bd7f093c2d7f9b21ab

  • SHA1

    ad9bfc2c3d70c574d34a752c5d0ebcc43a046c57

  • SHA256

    5b37e8ff2850a4cbb02f9f02391e9f07285b4e0667f7e4b2d4515b78e699735a

  • SHA512

    c19c29f8ad8b6beb3eed40ab7dc343468a4ca75d49f1d0d4ea0b4a5cee33f745893fba764d35c8bd157f7842268e0716b1eb4b8b26dcf888fb3b3f4314844aad

  • SSDEEP

    12288:pyfuv+DnikW2IfqFXKzNGNyyRmfD4vCgdiRST:pLWDnid2IfZGAyAfczdig

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\lib1\jphp-core.jar
    1⤵
      PID:2544

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2544-2-0x0000000002530000-0x00000000027A0000-memory.dmp

      Filesize

      2.4MB

      Download

    • memory/2544-10-0x0000000000150000-0x0000000000151000-memory.dmp

      Filesize

      4KB

      Download

    • memory/2544-11-0x0000000002530000-0x00000000027A0000-memory.dmp

      Filesize

      2.4MB

      Download