Resubmissions

10-02-2025 06:12

250210-gyapaasnam 10

10-02-2025 02:31

250210-czrxqsyncp 10

Analysis

  • max time kernel
    149s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20250207-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20250207-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10-02-2025 02:31

General

  • Target

    TT Payment.jar

  • Size

    267KB

  • MD5

    b4bc577b9b011c29d04f7e3797f5b4c0

  • SHA1

    dd5f810d906cd61a8ec78c28841a121fbaa88d6f

  • SHA256

    fe02be2dc318367898f962aa9c3415ff96d95526aa6f6efd72764a732f3b745c

  • SHA512

    12eba3aacb580eaf11dc9a9aec39ad5e926d053fc8e6fb6871153e22bfb2627628a64f3e931855ff772e63bb152862b7c59292345489085068e8e5c3263ecfa4

  • SSDEEP

    3072:fIMXATbZOaBKsPUVx4lboHQMg5CBklnIVSPxk/ISc6iTpoP6vBum4ggH9AoGa+:gAATbZiDPPqlISPW/IlFg6ZuZ+a+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file 1 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 1 IoCs

    Adversaries may check for Internet connectivity on compromised systems.

Processes

  • C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
    java -jar "C:\Users\Admin\AppData\Local\Temp\TT Payment.jar"
    1⤵
      PID:3068
    • C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
      "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping 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-PGFwcCBhcHBpZD0iezhBNjlEMzQ1LUQ1NjQtNDYzYy1BRkYxLUE2OUQ5RTUzMEY5Nn0iIHZlcnNpb249IjEyMy4wLjYzMTIuMTIzIiBuZXh0dmVyc2lvbj0iIiBsYW5nPSJlbiIgYnJhbmQ9IkdHTFMiIGNsaWVudD0iIiBpbnN0YWxsYWdlPSIyIiBpbnN0YWxsZGF0ZXRpbWU9IjE3Mzg5NDcxNzgiIG9vYmVfaW5zdGFsbF90aW1lPSIxMzM4MzQxOTY4MDM3MTAwMDAiPjxldmVudCBldmVudHR5cGU9IjMxIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIyMTc5ODYyIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI1Mjg4MjA3ODIyIi8-PC9hcHA-PC9yZXF1ZXN0Pg
      1⤵
      • System Location Discovery: System Language Discovery
      • System Network Configuration Discovery: Internet Connection Discovery
      PID:856

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3068-2-0x0000023FCC9A0000-0x0000023FCCC10000-memory.dmp

      Filesize

      2.4MB

    • memory/3068-12-0x0000023FCCC10000-0x0000023FCCC20000-memory.dmp

      Filesize

      64KB

    • memory/3068-14-0x0000023FCCC20000-0x0000023FCCC30000-memory.dmp

      Filesize

      64KB

    • memory/3068-18-0x0000023FCCC40000-0x0000023FCCC50000-memory.dmp

      Filesize

      64KB

    • memory/3068-17-0x0000023FCCC30000-0x0000023FCCC40000-memory.dmp

      Filesize

      64KB

    • memory/3068-21-0x0000023FCCC50000-0x0000023FCCC60000-memory.dmp

      Filesize

      64KB

    • memory/3068-32-0x0000023FCCC80000-0x0000023FCCC90000-memory.dmp

      Filesize

      64KB

    • memory/3068-34-0x0000023FCCCA0000-0x0000023FCCCB0000-memory.dmp

      Filesize

      64KB

    • memory/3068-37-0x0000023FCB170000-0x0000023FCB171000-memory.dmp

      Filesize

      4KB

    • memory/3068-33-0x0000023FCCC90000-0x0000023FCCCA0000-memory.dmp

      Filesize

      64KB

    • memory/3068-36-0x0000023FCC9A0000-0x0000023FCCC10000-memory.dmp

      Filesize

      2.4MB

    • memory/3068-29-0x0000023FCCC70000-0x0000023FCCC80000-memory.dmp

      Filesize

      64KB

    • memory/3068-28-0x0000023FCCC60000-0x0000023FCCC70000-memory.dmp

      Filesize

      64KB

    • memory/3068-38-0x0000023FCCCB0000-0x0000023FCCCC0000-memory.dmp

      Filesize

      64KB

    • memory/3068-44-0x0000023FCCC20000-0x0000023FCCC30000-memory.dmp

      Filesize

      64KB

    • memory/3068-48-0x0000023FCCCE0000-0x0000023FCCCF0000-memory.dmp

      Filesize

      64KB

    • memory/3068-47-0x0000023FCCC40000-0x0000023FCCC50000-memory.dmp

      Filesize

      64KB

    • memory/3068-46-0x0000023FCCC30000-0x0000023FCCC40000-memory.dmp

      Filesize

      64KB

    • memory/3068-43-0x0000023FCCCD0000-0x0000023FCCCE0000-memory.dmp

      Filesize

      64KB

    • memory/3068-42-0x0000023FCCCC0000-0x0000023FCCCD0000-memory.dmp

      Filesize

      64KB

    • memory/3068-41-0x0000023FCCC10000-0x0000023FCCC20000-memory.dmp

      Filesize

      64KB

    • memory/3068-52-0x0000023FCCD00000-0x0000023FCCD10000-memory.dmp

      Filesize

      64KB

    • memory/3068-53-0x0000023FCCC50000-0x0000023FCCC60000-memory.dmp

      Filesize

      64KB

    • memory/3068-51-0x0000023FCCCF0000-0x0000023FCCD00000-memory.dmp

      Filesize

      64KB

    • memory/3068-57-0x0000023FCCC60000-0x0000023FCCC70000-memory.dmp

      Filesize

      64KB

    • memory/3068-58-0x0000023FCCD10000-0x0000023FCCD20000-memory.dmp

      Filesize

      64KB

    • memory/3068-61-0x0000023FCCC70000-0x0000023FCCC80000-memory.dmp

      Filesize

      64KB

    • memory/3068-62-0x0000023FCCD20000-0x0000023FCCD30000-memory.dmp

      Filesize

      64KB

    • memory/3068-68-0x0000023FCCCA0000-0x0000023FCCCB0000-memory.dmp

      Filesize

      64KB

    • memory/3068-67-0x0000023FCCC90000-0x0000023FCCCA0000-memory.dmp

      Filesize

      64KB

    • memory/3068-66-0x0000023FCCC80000-0x0000023FCCC90000-memory.dmp

      Filesize

      64KB

    • memory/3068-69-0x0000023FCCD30000-0x0000023FCCD40000-memory.dmp

      Filesize

      64KB

    • memory/3068-72-0x0000023FCCD40000-0x0000023FCCD50000-memory.dmp

      Filesize

      64KB

    • memory/3068-73-0x0000023FCCCB0000-0x0000023FCCCC0000-memory.dmp

      Filesize

      64KB

    • memory/3068-74-0x0000023FCCD50000-0x0000023FCCD60000-memory.dmp

      Filesize

      64KB

    • memory/3068-79-0x0000023FCCD60000-0x0000023FCCD70000-memory.dmp

      Filesize

      64KB

    • memory/3068-78-0x0000023FCCCD0000-0x0000023FCCCE0000-memory.dmp

      Filesize

      64KB

    • memory/3068-77-0x0000023FCCCC0000-0x0000023FCCCD0000-memory.dmp

      Filesize

      64KB

    • memory/3068-85-0x0000023FCCCE0000-0x0000023FCCCF0000-memory.dmp

      Filesize

      64KB

    • memory/3068-84-0x0000023FCCD90000-0x0000023FCCDA0000-memory.dmp

      Filesize

      64KB

    • memory/3068-83-0x0000023FCCD80000-0x0000023FCCD90000-memory.dmp

      Filesize

      64KB

    • memory/3068-82-0x0000023FCCD70000-0x0000023FCCD80000-memory.dmp

      Filesize

      64KB

    • memory/3068-87-0x0000023FCB170000-0x0000023FCB171000-memory.dmp

      Filesize

      4KB

    • memory/3068-90-0x0000023FCCCF0000-0x0000023FCCD00000-memory.dmp

      Filesize

      64KB

    • memory/3068-92-0x0000023FCCDA0000-0x0000023FCCDB0000-memory.dmp

      Filesize

      64KB

    • memory/3068-91-0x0000023FCCD00000-0x0000023FCCD10000-memory.dmp

      Filesize

      64KB

    • memory/3068-94-0x0000023FCCDB0000-0x0000023FCCDC0000-memory.dmp

      Filesize

      64KB

    • memory/3068-96-0x0000023FCB170000-0x0000023FCB171000-memory.dmp

      Filesize

      4KB

    • memory/3068-97-0x0000023FCCD10000-0x0000023FCCD20000-memory.dmp

      Filesize

      64KB

    • memory/3068-100-0x0000023FCCD20000-0x0000023FCCD30000-memory.dmp

      Filesize

      64KB

    • memory/3068-101-0x0000023FCCDC0000-0x0000023FCCDD0000-memory.dmp

      Filesize

      64KB

    • memory/3068-103-0x0000023FCB170000-0x0000023FCB171000-memory.dmp

      Filesize

      4KB

    • memory/3068-104-0x0000023FCCD30000-0x0000023FCCD40000-memory.dmp

      Filesize

      64KB

    • memory/3068-105-0x0000023FCCDD0000-0x0000023FCCDE0000-memory.dmp

      Filesize

      64KB

    • memory/3068-108-0x0000023FCB170000-0x0000023FCB171000-memory.dmp

      Filesize

      4KB

    • memory/3068-110-0x0000023FCCD40000-0x0000023FCCD50000-memory.dmp

      Filesize

      64KB

    • memory/3068-111-0x0000023FCCDE0000-0x0000023FCCDF0000-memory.dmp

      Filesize

      64KB

    • memory/3068-113-0x0000023FCB170000-0x0000023FCB171000-memory.dmp

      Filesize

      4KB

    • memory/3068-114-0x0000023FCCD50000-0x0000023FCCD60000-memory.dmp

      Filesize

      64KB

    • memory/3068-116-0x0000023FCCD60000-0x0000023FCCD70000-memory.dmp

      Filesize

      64KB

    • memory/3068-117-0x0000023FCCDF0000-0x0000023FCCE00000-memory.dmp

      Filesize

      64KB

    • memory/3068-119-0x0000023FCB170000-0x0000023FCB171000-memory.dmp

      Filesize

      4KB

    • memory/3068-122-0x0000023FCCD70000-0x0000023FCCD80000-memory.dmp

      Filesize

      64KB

    • memory/3068-123-0x0000023FCCD80000-0x0000023FCCD90000-memory.dmp

      Filesize

      64KB

    • memory/3068-124-0x0000023FCCD90000-0x0000023FCCDA0000-memory.dmp

      Filesize

      64KB

    • memory/3068-125-0x0000023FCB170000-0x0000023FCB171000-memory.dmp

      Filesize

      4KB

    • memory/3068-126-0x0000023FCCDA0000-0x0000023FCCDB0000-memory.dmp

      Filesize

      64KB

    • memory/3068-127-0x0000023FCCDB0000-0x0000023FCCDC0000-memory.dmp

      Filesize

      64KB

    • memory/3068-129-0x0000023FCCDC0000-0x0000023FCCDD0000-memory.dmp

      Filesize

      64KB

    • memory/3068-130-0x0000023FCCDD0000-0x0000023FCCDE0000-memory.dmp

      Filesize

      64KB

    • memory/3068-131-0x0000023FCCDE0000-0x0000023FCCDF0000-memory.dmp

      Filesize

      64KB

    • memory/3068-132-0x0000023FCCDF0000-0x0000023FCCE00000-memory.dmp

      Filesize

      64KB

    • memory/3068-140-0x0000023FCCE00000-0x0000023FCCE10000-memory.dmp

      Filesize

      64KB

    • memory/3068-141-0x0000023FCB170000-0x0000023FCB171000-memory.dmp

      Filesize

      4KB

    • memory/3068-144-0x0000023FCCE10000-0x0000023FCCE20000-memory.dmp

      Filesize

      64KB

    • memory/3068-148-0x0000023FCCE00000-0x0000023FCCE10000-memory.dmp

      Filesize

      64KB

    • memory/3068-153-0x0000023FCB170000-0x0000023FCB171000-memory.dmp

      Filesize

      4KB

    • memory/3068-154-0x0000023FCCE10000-0x0000023FCCE20000-memory.dmp

      Filesize

      64KB

    • memory/3068-157-0x0000023FCB170000-0x0000023FCB171000-memory.dmp

      Filesize

      4KB

    • memory/3068-160-0x0000023FCCE20000-0x0000023FCCE30000-memory.dmp

      Filesize

      64KB

    • memory/3068-163-0x0000023FCCE30000-0x0000023FCCE40000-memory.dmp

      Filesize

      64KB

    • memory/3068-165-0x0000023FCCE20000-0x0000023FCCE30000-memory.dmp

      Filesize

      64KB

    • memory/3068-166-0x0000023FCCE30000-0x0000023FCCE40000-memory.dmp

      Filesize

      64KB