e1c2441658102934f84d5eca4206c784330ffcd5afd0d1388f3c028557cfbfda

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20250207-en
resource tags

arch:x64arch:x86image:win7-20250207-enlocale:en-usos:windows7-x64system
submitted
13/03/2025, 14:04

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

SHIPPING DOCS#04765342CHU.PDF.jar
Size

211KB
MD5

1d85e90da37068b469c780fc7a48e39d
SHA1

fd8c444b811ed76f1f21656db03fc4488cc07309
SHA256

5f254a78f046f08ddd45e1c1dfcdb3fe0be8258b207f874bc95bf269fe0713fa
SHA512

f65fae46e5a6320e052a52b5535e2c0a84b569abd4d1ea314499ec6791172492a3e4f36462bd88a22638fa75cdf2bc1049a313a7389097e66b87cbe435878e23
SSDEEP

3072:szR7A2Y0gUMxGZrrOVCobiBTr7zVTL8mPfiswap2OGr64BH4eyfJuoXvIFLB+yTz:4RLtMxyOVHiF75Tok7p2hNkIF1+yTbYQ

Score

3^/10

discovery

Malware Config

Signatures

System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 1 IoCs

Adversaries may check for Internet connectivity on compromised systems.

discovery

Internet Connection Discovery

T1016.001

pid	Process
2260	java.exe

C:\Windows\system32\java.exe
java -jar "C:\Users\Admin\AppData\Local\Temp\SHIPPING DOCS#04765342CHU.PDF.jar"
1⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:2260

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2260-2-0x00000000026B0000-0x0000000002920000-memory.dmp

Filesize
2.4MB

Download
memory/2260-11-0x0000000000240000-0x0000000000241000-memory.dmp

Filesize
4KB

Download
memory/2260-12-0x00000000026B0000-0x0000000002920000-memory.dmp

Filesize
2.4MB

Download