Analysis

  • max time kernel
    146s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20250314-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20250314-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/03/2025, 23:53

General

  • Target

    injector.jar

  • Size

    639KB

  • MD5

    debe64c97f491943e154956a20b1dbd9

  • SHA1

    2f166761d1d7a0b8962263d49669f8ed43265f0e

  • SHA256

    c97e12e9d8be059c6ba3034aa4b33cc2e7a2ffeb741fb4b6738ff4ae2186c113

  • SHA512

    a5d5400570f33b03af9e518fc288b91526724da72511c40008b5320458c061b226127d74f70d39ca4a0fafd1930e9c39e2bca6d6d04cf86cc128165b942f8f08

  • SSDEEP

    12288:mv7NQR/3nRsDp49VIFw/ga/vRj+hLgNCjSgeVeRBA34uI2x8S+BDQC:mvpQBBsd4Dr/gaxu+CjzQ14ulx/+BDQC

Score
6/10

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 6 IoCs
  • Views/modifies file attributes 1 TTPs 1 IoCs

Processes

  • C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\injector.jar
    1⤵
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3480
    • C:\Windows\SYSTEM32\attrib.exe
      attrib +H C:\Users\Admin\AppData\Roaming\Microsoft\.tmp\1743292434988.tmp
      2⤵
      • Views/modifies file attributes
      PID:1200
    • C:\Windows\SYSTEM32\cmd.exe
      cmd.exe /c "REG ADD HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /v Home /d "C:\Program Files\Java\jre-1.8\bin\javaw.exe -jar C:\Users\Admin\AppData\Roaming\Microsoft\.tmp\1743292434988.tmp" /f"
      2⤵
      • Suspicious use of WriteProcessMemory
      PID:2864
      • C:\Windows\system32\reg.exe
        REG ADD HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /v Home /d "C:\Program Files\Java\jre-1.8\bin\javaw.exe -jar C:\Users\Admin\AppData\Roaming\Microsoft\.tmp\1743292434988.tmp" /f
        3⤵
        • Adds Run key to start application
        PID:2440
  • C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /c C:\Program Files\Java\jre-1.8\bin\javaw.exe -jar C:\Users\Admin\AppData\Roaming\Microsoft\.tmp\1743292434988.tmp
    1⤵
      PID:3536

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Roaming\Microsoft\.tmp\1743292434988.tmp

      Filesize

      639KB

      MD5

      debe64c97f491943e154956a20b1dbd9

      SHA1

      2f166761d1d7a0b8962263d49669f8ed43265f0e

      SHA256

      c97e12e9d8be059c6ba3034aa4b33cc2e7a2ffeb741fb4b6738ff4ae2186c113

      SHA512

      a5d5400570f33b03af9e518fc288b91526724da72511c40008b5320458c061b226127d74f70d39ca4a0fafd1930e9c39e2bca6d6d04cf86cc128165b942f8f08

    • memory/3480-2-0x0000018BBD990000-0x0000018BBDC00000-memory.dmp

      Filesize

      2.4MB

    • memory/3480-14-0x0000018BBC080000-0x0000018BBC081000-memory.dmp

      Filesize

      4KB

    • memory/3480-18-0x0000018BBDC10000-0x0000018BBDC20000-memory.dmp

      Filesize

      64KB

    • memory/3480-17-0x0000018BBDC00000-0x0000018BBDC10000-memory.dmp

      Filesize

      64KB

    • memory/3480-24-0x0000018BBDC40000-0x0000018BBDC50000-memory.dmp

      Filesize

      64KB

    • memory/3480-23-0x0000018BBDC30000-0x0000018BBDC40000-memory.dmp

      Filesize

      64KB

    • memory/3480-22-0x0000018BBDC20000-0x0000018BBDC30000-memory.dmp

      Filesize

      64KB

    • memory/3480-26-0x0000018BBDC50000-0x0000018BBDC60000-memory.dmp

      Filesize

      64KB

    • memory/3480-28-0x0000018BBDC60000-0x0000018BBDC70000-memory.dmp

      Filesize

      64KB

    • memory/3480-30-0x0000018BBDC70000-0x0000018BBDC80000-memory.dmp

      Filesize

      64KB

    • memory/3480-37-0x0000018BBDC80000-0x0000018BBDC90000-memory.dmp

      Filesize

      64KB

    • memory/3480-39-0x0000018BBD990000-0x0000018BBDC00000-memory.dmp

      Filesize

      2.4MB

    • memory/3480-40-0x0000018BBDC90000-0x0000018BBDCA0000-memory.dmp

      Filesize

      64KB

    • memory/3480-43-0x0000018BBDCA0000-0x0000018BBDCB0000-memory.dmp

      Filesize

      64KB

    • memory/3480-42-0x0000018BBDC00000-0x0000018BBDC10000-memory.dmp

      Filesize

      64KB

    • memory/3480-47-0x0000018BBDCB0000-0x0000018BBDCC0000-memory.dmp

      Filesize

      64KB

    • memory/3480-46-0x0000018BBDC10000-0x0000018BBDC20000-memory.dmp

      Filesize

      64KB

    • memory/3480-52-0x0000018BBDCC0000-0x0000018BBDCD0000-memory.dmp

      Filesize

      64KB

    • memory/3480-57-0x0000018BBDCD0000-0x0000018BBDCE0000-memory.dmp

      Filesize

      64KB

    • memory/3480-56-0x0000018BBDC30000-0x0000018BBDC40000-memory.dmp

      Filesize

      64KB

    • memory/3480-55-0x0000018BBDC20000-0x0000018BBDC30000-memory.dmp

      Filesize

      64KB

    • memory/3480-62-0x0000018BBDCE0000-0x0000018BBDCF0000-memory.dmp

      Filesize

      64KB

    • memory/3480-61-0x0000018BBDC40000-0x0000018BBDC50000-memory.dmp

      Filesize

      64KB

    • memory/3480-65-0x0000018BBDCF0000-0x0000018BBDD00000-memory.dmp

      Filesize

      64KB

    • memory/3480-64-0x0000018BBDC50000-0x0000018BBDC60000-memory.dmp

      Filesize

      64KB

    • memory/3480-66-0x0000018BBC080000-0x0000018BBC081000-memory.dmp

      Filesize

      4KB

    • memory/3480-67-0x0000018BBDC60000-0x0000018BBDC70000-memory.dmp

      Filesize

      64KB

    • memory/3480-69-0x0000018BBDC70000-0x0000018BBDC80000-memory.dmp

      Filesize

      64KB

    • memory/3480-70-0x0000018BBDC80000-0x0000018BBDC90000-memory.dmp

      Filesize

      64KB

    • memory/3480-72-0x0000018BBDC90000-0x0000018BBDCA0000-memory.dmp

      Filesize

      64KB

    • memory/3480-73-0x0000018BBDD00000-0x0000018BBDD10000-memory.dmp

      Filesize

      64KB

    • memory/3480-76-0x0000018BBC080000-0x0000018BBC081000-memory.dmp

      Filesize

      4KB

    • memory/3480-79-0x0000018BBDD10000-0x0000018BBDD20000-memory.dmp

      Filesize

      64KB

    • memory/3480-78-0x0000018BBDCA0000-0x0000018BBDCB0000-memory.dmp

      Filesize

      64KB

    • memory/3480-80-0x0000018BBC080000-0x0000018BBC081000-memory.dmp

      Filesize

      4KB

    • memory/3480-83-0x0000018BBDD20000-0x0000018BBDD30000-memory.dmp

      Filesize

      64KB

    • memory/3480-82-0x0000018BBDCB0000-0x0000018BBDCC0000-memory.dmp

      Filesize

      64KB

    • memory/3480-86-0x0000018BBDD30000-0x0000018BBDD40000-memory.dmp

      Filesize

      64KB

    • memory/3480-85-0x0000018BBDCC0000-0x0000018BBDCD0000-memory.dmp

      Filesize

      64KB

    • memory/3480-89-0x0000018BBDCD0000-0x0000018BBDCE0000-memory.dmp

      Filesize

      64KB

    • memory/3480-90-0x0000018BBDD40000-0x0000018BBDD50000-memory.dmp

      Filesize

      64KB

    • memory/3480-93-0x0000018BBDCE0000-0x0000018BBDCF0000-memory.dmp

      Filesize

      64KB

    • memory/3480-94-0x0000018BBDD50000-0x0000018BBDD60000-memory.dmp

      Filesize

      64KB

    • memory/3480-96-0x0000018BBDCF0000-0x0000018BBDD00000-memory.dmp

      Filesize

      64KB

    • memory/3480-97-0x0000018BBDD60000-0x0000018BBDD70000-memory.dmp

      Filesize

      64KB

    • memory/3480-100-0x0000018BBDD70000-0x0000018BBDD80000-memory.dmp

      Filesize

      64KB

    • memory/3480-101-0x0000018BBC080000-0x0000018BBC081000-memory.dmp

      Filesize

      4KB

    • memory/3480-104-0x0000018BBC080000-0x0000018BBC081000-memory.dmp

      Filesize

      4KB

    • memory/3480-106-0x0000018BBDD80000-0x0000018BBDD90000-memory.dmp

      Filesize

      64KB

    • memory/3480-108-0x0000018BBDD00000-0x0000018BBDD10000-memory.dmp

      Filesize

      64KB

    • memory/3480-109-0x0000018BBDD90000-0x0000018BBDDA0000-memory.dmp

      Filesize

      64KB

    • memory/3480-112-0x0000018BBDDA0000-0x0000018BBDDB0000-memory.dmp

      Filesize

      64KB

    • memory/3480-111-0x0000018BBDD10000-0x0000018BBDD20000-memory.dmp

      Filesize

      64KB

    • memory/3480-115-0x0000018BBDD20000-0x0000018BBDD30000-memory.dmp

      Filesize

      64KB

    • memory/3480-116-0x0000018BBDDB0000-0x0000018BBDDC0000-memory.dmp

      Filesize

      64KB

    • memory/3480-117-0x0000018BBDD30000-0x0000018BBDD40000-memory.dmp

      Filesize

      64KB

    • memory/3480-120-0x0000018BBDDC0000-0x0000018BBDDD0000-memory.dmp

      Filesize

      64KB

    • memory/3480-119-0x0000018BBDD40000-0x0000018BBDD50000-memory.dmp

      Filesize

      64KB

    • memory/3480-124-0x0000018BBDDD0000-0x0000018BBDDE0000-memory.dmp

      Filesize

      64KB

    • memory/3480-123-0x0000018BBDD50000-0x0000018BBDD60000-memory.dmp

      Filesize

      64KB

    • memory/3480-127-0x0000018BBDDE0000-0x0000018BBDDF0000-memory.dmp

      Filesize

      64KB

    • memory/3480-126-0x0000018BBDD60000-0x0000018BBDD70000-memory.dmp

      Filesize

      64KB

    • memory/3480-132-0x0000018BBC080000-0x0000018BBC081000-memory.dmp

      Filesize

      4KB

    • memory/3480-134-0x0000018BBDD70000-0x0000018BBDD80000-memory.dmp

      Filesize

      64KB

    • memory/3480-135-0x0000018BBDDF0000-0x0000018BBDE00000-memory.dmp

      Filesize

      64KB

    • memory/3480-136-0x0000018BBC080000-0x0000018BBC081000-memory.dmp

      Filesize

      4KB

    • memory/3480-139-0x0000018BBDE00000-0x0000018BBDE10000-memory.dmp

      Filesize

      64KB

    • memory/3480-138-0x0000018BBDD80000-0x0000018BBDD90000-memory.dmp

      Filesize

      64KB

    • memory/3480-141-0x0000018BBDD90000-0x0000018BBDDA0000-memory.dmp

      Filesize

      64KB

    • memory/3480-142-0x0000018BBDE10000-0x0000018BBDE20000-memory.dmp

      Filesize

      64KB

    • memory/3480-145-0x0000018BBDE20000-0x0000018BBDE30000-memory.dmp

      Filesize

      64KB

    • memory/3480-144-0x0000018BBDDA0000-0x0000018BBDDB0000-memory.dmp

      Filesize

      64KB

    • memory/3480-148-0x0000018BBDDB0000-0x0000018BBDDC0000-memory.dmp

      Filesize

      64KB

    • memory/3480-149-0x0000018BBDE30000-0x0000018BBDE40000-memory.dmp

      Filesize

      64KB

    • memory/3480-151-0x0000018BBDE40000-0x0000018BBDE50000-memory.dmp

      Filesize

      64KB

    • memory/3480-152-0x0000018BBC080000-0x0000018BBC081000-memory.dmp

      Filesize

      4KB

    • memory/3480-153-0x0000018BBDDC0000-0x0000018BBDDD0000-memory.dmp

      Filesize

      64KB

    • memory/3480-154-0x0000018BBDDD0000-0x0000018BBDDE0000-memory.dmp

      Filesize

      64KB

    • memory/3480-155-0x0000018BBC080000-0x0000018BBC081000-memory.dmp

      Filesize

      4KB

    • memory/3480-158-0x0000018BBC080000-0x0000018BBC081000-memory.dmp

      Filesize

      4KB

    • memory/3480-159-0x0000018BBDDE0000-0x0000018BBDDF0000-memory.dmp

      Filesize

      64KB

    • memory/3480-160-0x0000018BBC080000-0x0000018BBC081000-memory.dmp

      Filesize

      4KB

    • memory/3480-162-0x0000018BBDE50000-0x0000018BBDE60000-memory.dmp

      Filesize

      64KB

    • memory/3480-164-0x0000018BBDDF0000-0x0000018BBDE00000-memory.dmp

      Filesize

      64KB

    • memory/3480-165-0x0000018BBC080000-0x0000018BBC081000-memory.dmp

      Filesize

      4KB

    • memory/3480-168-0x0000018BBDE60000-0x0000018BBDE70000-memory.dmp

      Filesize

      64KB

    • memory/3480-167-0x0000018BBDE00000-0x0000018BBDE10000-memory.dmp

      Filesize

      64KB

    • memory/3480-172-0x0000018BBDE70000-0x0000018BBDE80000-memory.dmp

      Filesize

      64KB

    • memory/3480-171-0x0000018BBDE10000-0x0000018BBDE20000-memory.dmp

      Filesize

      64KB

    • memory/3480-175-0x0000018BBDE80000-0x0000018BBDE90000-memory.dmp

      Filesize

      64KB

    • memory/3480-174-0x0000018BBDE20000-0x0000018BBDE30000-memory.dmp

      Filesize

      64KB

    • memory/3480-179-0x0000018BBC080000-0x0000018BBC081000-memory.dmp

      Filesize

      4KB

    • memory/3480-180-0x0000018BBDE30000-0x0000018BBDE40000-memory.dmp

      Filesize

      64KB

    • memory/3480-181-0x0000018BBDE40000-0x0000018BBDE50000-memory.dmp

      Filesize

      64KB

    • memory/3480-182-0x0000018BBC080000-0x0000018BBC081000-memory.dmp

      Filesize

      4KB

    • memory/3480-183-0x0000018BBC080000-0x0000018BBC081000-memory.dmp

      Filesize

      4KB

    • memory/3480-184-0x0000018BBC080000-0x0000018BBC081000-memory.dmp

      Filesize

      4KB

    • memory/3480-187-0x0000018BBC080000-0x0000018BBC081000-memory.dmp

      Filesize

      4KB

    • memory/3480-190-0x0000018BBDE90000-0x0000018BBDEA0000-memory.dmp

      Filesize

      64KB

    • memory/3480-189-0x0000018BBDE50000-0x0000018BBDE60000-memory.dmp

      Filesize

      64KB

    • memory/3480-192-0x0000018BBDEA0000-0x0000018BBDEB0000-memory.dmp

      Filesize

      64KB

    • memory/3480-195-0x0000018BBDE60000-0x0000018BBDE70000-memory.dmp

      Filesize

      64KB

    • memory/3480-197-0x0000018BBC080000-0x0000018BBC081000-memory.dmp

      Filesize

      4KB

    • memory/3480-198-0x0000018BBDE70000-0x0000018BBDE80000-memory.dmp

      Filesize

      64KB

    • memory/3480-200-0x0000018BBDE80000-0x0000018BBDE90000-memory.dmp

      Filesize

      64KB

    • memory/3480-201-0x0000018BBC080000-0x0000018BBC081000-memory.dmp

      Filesize

      4KB

    • memory/3480-204-0x0000018BBC080000-0x0000018BBC081000-memory.dmp

      Filesize

      4KB

    • memory/3480-205-0x0000018BBDEB0000-0x0000018BBDEC0000-memory.dmp

      Filesize

      64KB

    • memory/3480-207-0x0000018BBDEC0000-0x0000018BBDED0000-memory.dmp

      Filesize

      64KB

    • memory/3480-210-0x0000018BBC080000-0x0000018BBC081000-memory.dmp

      Filesize

      4KB

    • memory/3480-214-0x0000018BBDE90000-0x0000018BBDEA0000-memory.dmp

      Filesize

      64KB

    • memory/3480-215-0x0000018BBDEA0000-0x0000018BBDEB0000-memory.dmp

      Filesize

      64KB

    • memory/3480-218-0x0000018BBDED0000-0x0000018BBDEE0000-memory.dmp

      Filesize

      64KB

    • memory/3480-223-0x0000018BBC080000-0x0000018BBC081000-memory.dmp

      Filesize

      4KB

    • memory/3480-224-0x0000018BBDEB0000-0x0000018BBDEC0000-memory.dmp

      Filesize

      64KB

    • memory/3480-225-0x0000018BBC080000-0x0000018BBC081000-memory.dmp

      Filesize

      4KB

    • memory/3480-226-0x0000018BBDEC0000-0x0000018BBDED0000-memory.dmp

      Filesize

      64KB

    • memory/3480-227-0x0000018BBC080000-0x0000018BBC081000-memory.dmp

      Filesize

      4KB

    • memory/3480-230-0x0000018BBC080000-0x0000018BBC081000-memory.dmp

      Filesize

      4KB

    • memory/3480-231-0x0000018BBDEE0000-0x0000018BBDEF0000-memory.dmp

      Filesize

      64KB

    • memory/3480-232-0x0000018BBC080000-0x0000018BBC081000-memory.dmp

      Filesize

      4KB

    • memory/3480-234-0x0000018BBC080000-0x0000018BBC081000-memory.dmp

      Filesize

      4KB

    • memory/3480-237-0x0000018BBC080000-0x0000018BBC081000-memory.dmp

      Filesize

      4KB

    • memory/3480-238-0x0000018BBDED0000-0x0000018BBDEE0000-memory.dmp

      Filesize

      64KB

    • memory/3480-239-0x0000018BBC080000-0x0000018BBC081000-memory.dmp

      Filesize

      4KB

    • memory/3480-246-0x0000018BBDEE0000-0x0000018BBDEF0000-memory.dmp

      Filesize

      64KB

    • memory/3480-249-0x0000018BBC080000-0x0000018BBC081000-memory.dmp

      Filesize

      4KB

    • memory/3480-252-0x0000018BBC080000-0x0000018BBC081000-memory.dmp

      Filesize

      4KB

    • memory/3480-255-0x0000018BBC080000-0x0000018BBC081000-memory.dmp

      Filesize

      4KB