Analysis

  • max time kernel
    418s
  • max time network
    433s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07-01-2025 21:21

General

  • Target

    jre/bin/javaw.exe

  • Size

    187KB

  • MD5

    48c96771106dbdd5d42bba3772e4b414

  • SHA1

    e84749b99eb491e40a62ed2e92e4d7a790d09273

  • SHA256

    a96d26428942065411b1b32811afd4c5557c21f1d9430f3696aa2ba4c4ac5f22

  • SHA512

    9f891c787eb8ceed30a4e16d8e54208fa9b19f72eeec55b9f12d30dc8b63e5a798a16b1ccc8cea3e986191822c4d37aedb556e534d2eb24e4a02259555d56a2c

  • SSDEEP

    3072:lScg0xvhTZNIs3Ft+STckCBQo3C0Y22vncTBfsO9jZqMN3cH1Tefqk:lSclI6nTc3BQo3C0YHncTBxvs65

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\jre\bin\javaw.exe
    "C:\Users\Admin\AppData\Local\Temp\jre\bin\javaw.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1788

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1788-5-0x00000000023B0000-0x00000000023D8000-memory.dmp

    Filesize

    160KB

  • memory/1788-11-0x00000000023F8000-0x0000000002400000-memory.dmp

    Filesize

    32KB

  • memory/1788-12-0x0000000002400000-0x0000000002408000-memory.dmp

    Filesize

    32KB

  • memory/1788-33-0x0000000002458000-0x0000000002460000-memory.dmp

    Filesize

    32KB

  • memory/1788-32-0x00000000023F0000-0x00000000023F8000-memory.dmp

    Filesize

    32KB

  • memory/1788-31-0x0000000002448000-0x0000000002450000-memory.dmp

    Filesize

    32KB

  • memory/1788-29-0x0000000002450000-0x0000000002458000-memory.dmp

    Filesize

    32KB

  • memory/1788-30-0x00000000023E8000-0x00000000023F0000-memory.dmp

    Filesize

    32KB

  • memory/1788-35-0x00000000007D0000-0x00000000007D1000-memory.dmp

    Filesize

    4KB

  • memory/1788-36-0x00000000023B0000-0x00000000023D8000-memory.dmp

    Filesize

    160KB

  • memory/1788-37-0x00000000023F8000-0x0000000002400000-memory.dmp

    Filesize

    32KB

  • memory/1788-38-0x0000000002400000-0x0000000002408000-memory.dmp

    Filesize

    32KB

  • memory/1788-40-0x0000000002458000-0x0000000002460000-memory.dmp

    Filesize

    32KB

  • memory/1788-39-0x00000000023E8000-0x00000000023F0000-memory.dmp

    Filesize

    32KB