6dfff4c60b32f6e841b1e7cf4ea99831820f4aa2dd81421d7257bdfedcd28365 | Triage

Analysis

max time kernel
102s
max time network
105s
platform
windows11-21h2_x64
resource
win11-20250410-en
resource tags

arch:x64arch:x86image:win11-20250410-enlocale:en-usos:windows11-21h2-x64system
submitted
13/04/2025, 16:51

Sharing

Report Analysis Logs

General

Target

Sorillas.jar
Size

10.0MB
MD5

7e3c3eadd00b0903f1fcc806536cf406
SHA1

efe17275ac9ffc91fb1ce25f579fbfa1f8dc6095
SHA256

6dfff4c60b32f6e841b1e7cf4ea99831820f4aa2dd81421d7257bdfedcd28365
SHA512

9dcd295c96f6beab8fb5af447fa759bbf7ff1154f345affeff1b06e2f205e561cd6eb31db23f3656e751d0892c4b766112684068b43bb4e70a075c1a909a2abc
SSDEEP

196608:ulloD+JyfJIFFM0rT/mpDni/Mcd8qAbPeGmeIWvhAn9QrmE:uHoz0FM02JiEQ/kGdeIWJC9Qrx

Score

1^/10

Malware Config

Signatures

C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
java -jar C:\Users\Admin\AppData\Local\Temp\Sorillas.jar
1⤵
PID:3308

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:5084

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3308-2-0x000001498F820000-0x000001498FA90000-memory.dmp

Filesize
2.4MB

Download
memory/3308-12-0x000001498E050000-0x000001498E051000-memory.dmp

Filesize
4KB

Download
memory/3308-17-0x000001498E050000-0x000001498E051000-memory.dmp

Filesize
4KB

Download
memory/3308-18-0x000001498F820000-0x000001498FA90000-memory.dmp

Filesize
2.4MB

Download