Analysis
-
max time kernel
425s -
max time network
540s -
platform
windows10-ltsc 2021_x64 -
resource
win10ltsc2021-20250217-en -
resource tags
-
submitted
24/02/2025, 02:46
General
-
Target
idk bro.jar
-
Size
639KB
-
MD5
77500cdad67aa74ceda0e7b5673ebc86
-
SHA1
9112360da806440e3dd0812e7235cd83e5d5da9a
-
SHA256
0d63158ad92fa2bdedd465302a18e8f8f910efae6eb6686a1c846c2a9cc9cae4
-
SHA512
fb233bc220cf5e1b0ef80db1c5df5abf1f80adf584d684dd9552e6420f9d3aad0a3e7b1ac716357e0d560048ede5b3cd15211d4e0b7f1b0ce85aeb19cac0cd87
-
SSDEEP
12288:ZH5eQw/8m4zCv4bG0mh3go/NRj+BMWNS9xgohuRi73Wuc2FMSbzDwN:ZHwQ8kz24i33goX+5S9OCnWuhFPbzDwN
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Enumerates connected drives 3 TTPs 1 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
-
Suspicious use of WriteProcessMemory 6 IoCs
-
Views/modifies file attributes 1 TTPs 1 IoCs
Processes
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -jar "C:\Users\Admin\AppData\Local\Temp\idk bro.jar"1⤵
- Enumerates connected drives
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Windows\SYSTEM32\attrib.exeattrib +H C:\Users\Admin\AppData\Roaming\Microsoft\.tmp\1740365203316.tmp2⤵
- Views/modifies file attributes
-
-
C:\Windows\SYSTEM32\cmd.execmd.exe /c "REG ADD HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /v Home /d "C:\Program Files\Java\jre-1.8\bin\javaw.exe -jar C:\Users\Admin\AppData\Roaming\Microsoft\.tmp\1740365203316.tmp" /f"2⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\reg.exeREG ADD HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /v Home /d "C:\Program Files\Java\jre-1.8\bin\javaw.exe -jar C:\Users\Admin\AppData\Roaming\Microsoft\.tmp\1740365203316.tmp" /f3⤵
- Adds Run key to start application
-
-
Network
MITRE ATT&CK Enterprise v15
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
38KB
MD528c57bc7865875e00087e0ab0caa0a52
SHA19778fdd8efb3f558d238e592506935afdb6e37e6
SHA256a8db692832d478a8efa13762fd51d80a69bcf167028e3bbe9205a6d19cc25d85
SHA512520eead2ba72672973828b7111075a024b1d7edac08772ec66bf7c44cf08d2a76cb14423568ead708a818c1a11801e111e4cee29b88e98aacb69702a87a19eeb
-
Filesize
330B
MD5a884b5751ac6cc1bb016b5bbad394b28
SHA14c214d93ab93aa2e401c44701299e18d8ae93525
SHA25628b41c007ce593d2cd245fdf8fbe5382cd0b2c8ba08d916306ce289b34ca02be
SHA512d47540e5322612f2c272f6f1c1ffd07e2bdf88da53356ed1e5dbe1e3983b77552082be51a662c0a9817960c5ead11257a82beca627979f1b7e4ff44846b4b754
-
Filesize
37KB
MD5d2491fac62db6b4222086b32f7caad97
SHA1aeb106a0296cd1e4e8045d322f632b9ff6d4ee77
SHA256748f725cccb465b8f1f66dfc2a0d70bffc574177dbda9bcce9d7a6c64db9dee0
SHA5127e66a24fcb797cb35a385d5b9c5088dfc78beff7a4eea4c1b16f80f7b5c7f519f8d296c94a5984dea43b9a641c533f0078f0de689825bf57aa3d0ef2672553b9
-
Filesize
260B
MD5fca331452cf1c2b5e75df889dfaa94ac
SHA1a799675adb1eb5e9e893117a8eaabe6e1c0c9ac3
SHA256f2282f78a4c6b933a6f0a1970a4fc32889bccdce4058283dcfb57e7b1a110c38
SHA512beb50424f0f352c736e6318dc9f4bee68b234cffeb2c634521da039fb1b9e1a9c947ea2e6e6a5f4c7e84121adf7922403efa453ded3a45a7803213d7b4d9307d
-
Filesize
395B
MD53338aa57aaaded7c314425d22be5483e
SHA1b09b6bc78079488dba2112e92a5ca59388f0d382
SHA2566ec54458e0593bd19cb9437e7c778d913c8cdf942bb0396e34866fae1aa96767
SHA512d3c3c6c1a4ea7bd6c68c502bc2c720ae79d54f31062a55aac280d05e4ce27224a42e092fc3b9d0639e575722825b071e7d52b1a284fc20a0d4a30dbbb5bbf3f2
-
Filesize
426B
MD5c7cc46c4e398e69d5f1fddfc1467a1f5
SHA15480a028f1020e279ab03de1f67788a01eb1c258
SHA256a218355ee47705703925ca42086215669a57fcdfa7170f1d58cf97ed484c0ffd
SHA512bd143f9185f0bad38a88c4a8bd5f3c53e7cda0f97f8ab3a2a22bcda7b06fb903abacd4173f439bb61616d9b392ff8cbeb554e370962d1869fe1f9169837ce283
-
Filesize
222B
MD55ce32d1e2175e17faa168d16a8a9b8df
SHA1351275b499d3f200a91f2e37156d2c42851fb91c
SHA25620cf255ab75bb17fce6155efad8db671512e46f7f6553036b8e3eb3d1df774ca
SHA5122b74f7b915313ef9cf3b1606c13238584389ad66be206524fda05c438324f2dc16fe610bb536ca0d127be0fd20c8bbd69535914028bfbc48cfe85e946f373cdd
-
Filesize
300B
MD509e7aa6a00338d557e75c119adfbcca1
SHA11a4296f9f6329b594b1200a956e67a438b4e9556
SHA256ac4771ba8721484bd99b9df3045a8817bacece36c18b9af522965af5178edaeb
SHA51238181c1d0f909d8877647bf91b4f02b0d14e53ea57eea34bab7e798a782266711d7ad1a218d8593d0fc324837077e16ba9bdc185e7397de6540dd36ad996e324
-
Filesize
351B
MD5023126c0696b39485af6f57eb2911cdf
SHA160d74b4d1bc3b6f192b26c859bbafb23b8e4c9c9
SHA2563d3c6dddbc54af1b647adab3fd9e84731891df92fdca5ddc5925496f5197f40a
SHA512cb9c7ffb498855f3e5beace260029b860c9f22f35bc921e133574e1122c764ada17d0de5e6405a7e093ac48a8ff7f5c4ae0579af68bec8e0af1ecb32f640291b
-
Filesize
31KB
MD5d4c9429bbd4c35a9e5e6a8d59ca3973a
SHA15cdd4e36f212f484ca87deec8198c4eebbc852c8
SHA2565cff2aecbe6190cb78f42bdcef0f6269efe282597228286fd6ccdbe9795aa541
SHA5120e93cae4fdd22561deff274318d82d34cc6d0451eb507d1dd7b1efec8cb9a1e049e03ffe0efc683a9a75593e8738ca41892fe1db0f682dcdd3519cd735ec8d7b
-
Filesize
580B
MD5b090e8ff133589f05da97052d6e49fcc
SHA12af5bdd2fa787723f1d9aadd0c45e6dc32439be0
SHA256419178688d5ad63fc8c82ca6c037c3d32bae23b7abe087bd472466cf56ec41ea
SHA5127e2f3d74f9b62350dc1b55510a1c6290fcc05411c7ebd057dd5376d868b3869ec0f26de84b1daec9da4d69c111fef762c4268af2771d1996e590a658e3133093
-
Filesize
37KB
MD5e3db665430b604f29ddfe88927e58cda
SHA10d2a94e25eeae68a51067902b43223498a25d807
SHA256729f821cf8dcc10c66c1b6fdbf270898fe39e74c274e4e8524d3e8d429fe08f6
SHA5124422655b4c16af6a327ea03d7faca01d8263ad377b11ddcd26e53117b423009c41507864c4797033caaf3b09e07cb664483af9a045a967317e2a0e2536329f25
-
Filesize
597B
MD532284e8acaaa7693bd585632a80aeea2
SHA1067064c4965e77d321b0f38982a199bcd64a23b7
SHA2569d80bb4ad94cb30f33ff995b1c9dd9152e1db6d8bc08b6e45554e5e782cbe60f
SHA512d1a9bd110eda355f101f3a0a97f3fbb950e0c921f08c1f35ea02185e8752d75bf05c18369748cd9c90cdd82d805b55ec42192ee602e946fa167830745572f8f2
-
Filesize
850B
MD521c3facdf1026c2dd79f0110eb9f7f0f
SHA193e0449d1e8a845a6253762b2af0d57efe97e036
SHA256fb88993dd5cab2af179a4d0818b1114f17b6dd07f122370ef03da6c88f14afa2
SHA512680ac6318c04416b26e3dc8192bdee5be269bd33ec422ca1700cc0b886f15e55a4d64dda0f0113cc3d7b7315b6cd61b37d2de4fec4fba5a04fc0a92f65c5761c
-
Filesize
125B
MD5b2f046457203f1fdf5c6917d76a6f741
SHA1cd8f54e7b88fbd7f223afd2f5560bb08b76276c3
SHA2566bcd663c96f1925381162102e71b269976c4528f96ef7f9257ac6687b44a30a7
SHA512d36aea6efca402f16558c72f9cae34f9fde36512de822c6235c230452b0b447a8a422957c5f366af7ba8cee178833f878d3f71267739aaa08eae95bee7f8d067
-
Filesize
584B
MD5c6545ac56e958270088b4842f484756b
SHA1f6381b020b0e2e6d8e26babfb0b65aa19522c527
SHA256b2483dd24cc16817588d7fa3d9ab0c18d710e806c81bec419e7b918b4b07564c
SHA512135e8bc052a56de4ddacb9fafea36657b09ed6a5e41d9ddb94a53adfe89ef0f6aeb9d41036949329c6a3d6f0d4375cbbcf8c09d0de4626ef14dc5a02edcb4e95
-
Filesize
629B
MD5d7c66f2f15b87724696da25e78bc0a95
SHA1dadd20f7409285683ccbadd286c513e011782b72
SHA2563d1dd772776939aaa072c8661a1ec1162b9a689ee1a79c7e622c026d360f80c6
SHA512f429db4ebd7d4d87ec9ffc21a617ba958dd2c9f381ab370e1fc55020cb8714f7dfb8693df74ce73c2c121f22881915744d29a031edc8155488029df34c5600ad
-
Filesize
496B
MD5ca4883a8673b8831548e60549214da06
SHA1558c19847dc07fbfa9794a5260b35a6e521929dd
SHA2560a1b5086c21ff45ca2a15a999e172fc653d18ac9058fe54b1deffc52b1597ce6
SHA51245f389c18be67c2bc98b95a88c675694e5d2279bc5bdfad18daaf32440d37956ea699a0410bc5b9cebb76bddcfff13a0b64179169a50a4c0c6ee0cafe3eae89c
-
Filesize
253B
MD534c76e795f451416eef0d2a61c1a30a4
SHA1cbbddfe66002fc4b57ed3b5d04bcdc79c49d5454
SHA256933800d95ff9fc4ad4dc5f53c972fa4919cb46fda14ccdf16a4815c099806797
SHA512c7539a80890b226f16344c5c94b768f98d0f8497f65f02b567a9ebccf1e22a6701a0effae3fb0124b5d00bcc64193124d5608f6f0be1c94e21f3104181049a98
-
Filesize
294B
MD53afd2e1d38c0ed059aa821a530e992c0
SHA11769bab69a55cdc96264259ca4c91f7f3a01a318
SHA25643120ce57a98d48e28a72aad444ed2bb0e1cb19876df0600d9f4417a4cd4ee51
SHA5127e65021cd64ac9f907183b088d00a62c1c495e023f0b89cca7c902e4c10be9f434583934a9d527f060c2cec74cea6ab98ef3e2a8352f5434c9569367f96c28a4
-
Filesize
388B
MD5b04d66da7b58ca382de0823bb8289f83
SHA1f1cda021b46b23b6dd492efc1b4836ec66ecfe8a
SHA2562aeb1f880743aa3a8fadf54c21ddbeb03e8dc335aea4d51a7ff4125b36ff77dd
SHA51278afe40dfe9c0a55442bd8744ee0471898058d3f7898167dc47183ab58e5d2453155983e1ce59271baac3c3995c0c9a561513fdfc0d523f7f9fe216876200dce
-
Filesize
484B
MD5cc8fbb4440ae04418928c8d42e4ccb21
SHA1bbbeed8e96bcfa4dfd977441a83566dbc638e079
SHA256cd899a1183aeeac6a4c6a0f17d8af1845d244896d7e9fd309b1f486d918f89c0
SHA512569892d513c1c56ceac24ee757e4868a14b4c3a5084c2b21192a36a171dd5240914621a203ebacb0ada0d65fc406c31be8346445fb3a86c0280515006376472c
-
Filesize
37KB
MD5a5f86dee1a0f180905ee0cf4260bd622
SHA1d6bca256c3e00d04a7669bf7e56feda98621a3ce
SHA256db1d58c1d7882f5aad9619ef21be42a4548c3745aee8506e5b8139f590df76dd
SHA512bc7bddb5efe31ec038e4742d315114cc112a5293ca9f496f15e8f82b995d0d05729f92bbd1912f94b1629fa90fca097bef24df5f3d7a4f2c90813417add5496f
-
Filesize
232B
MD5f366e326624f5b3ced2b01969c776b3e
SHA105f74e035383e89a477457ea8b3594c8328dad82
SHA25683fa65bee30600736f905f06a53fa55ab85ae9279f961bab12f508473d2d94bf
SHA51291d277b6223425816cbaa684129b8975a15b1cb16ee4dadb31c2d8cc7b20b39b3941aefcaf7f997ab820861c71221032dce729e0520c5c449567ed70efda808a
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.4MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.4MB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB