Joe Sandbox Cloud Basic

Want to search on specific fields?


Try our:

Advanced Search

Want to search in depth on all Cloud Basic reports?

Try: Joe Sandbox View

Register Login
sloganpng
top title background image
flash

Quotation.jar

Status: finished
Submission Time: 2021-09-28 12:47:39 +02:00
Malicious
Evader
Trojan
STRRAT

Comments

Tags

  • jar
  • STRRAT

Details

  • Analysis ID:
    492179
  • API (Web) ID:
    859747
  • Analysis Started:
    2021-09-28 12:51:05 +02:00
  • Analysis Finished:
    2021-09-28 13:12:06 +02:00
  • MD5:
    8eab8f1a928fa55303b7558536079a2a
  • SHA1:
    491e913225a8c8d144c538fe27cf62f5a8465b38
  • SHA256:
    20351665df8b2d441524a21163e0aa95ea3d3805a873032eb6f55fa1001f3941
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
Full Report Management Report IOC Report
malicious
Score: 52
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Full Report Management Report IOC Report
malicious
Score: 60
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Run Condition: Without Tracing

Third Party Analysis Engines

Open Full Report
malicious
Score: 16/60
malicious
Score: 10/45

URLs

Name Detection
http://www.quovadis.bm
http://cps.chambersign.org/cps/chambersroot.html
http://www.certplus.com/CRL/class3P.crl
Click to see the 32 hidden entries
http://www.certplus.com/CRL/class3P.crl0
http://crl.securetrust.com/STCA.crl
http://www.certplus.com/CRL/class2.crl0
http://www.quovadisglobal.com/cps0
http://crl.xrampsecurity.com/XGCA.crl0
http://trustcenter-crl.certificat2.com/Keynectis/KEYNECTIS_ROOT_CA.crl
http://www.quovadisglobal.com/cps
http://www.quovadis.bm0
https://ocsp.quovadisoffshore.com0
http://www.allatori.com
http://crl.chambersign.org/chambersroot.crl
http://repository.swisssign.com/
http://www.chambersign.org
https://github.com/kristian/system-hook/releases/download/3.5/system-hook-3.5.jar
http://policy.camerfirma.com0
http://www.chambersign.org1
https://repo1.maven.org/maven2/net/java/dev/jna/jna-platform/5.5.0/jna-platform-5.5.0.jar
http://crl.chambersign.org/chambersroot.crl0
http://trustcenter-crl.certificat2.com/Keynectis/KEYNECTIS_ROOT_CA.crl0
http://www.certplus.com/CRL/class2.crl
http://bugreport.sun.com/bugreport/
http://cps.chambersign.org/cps/chambersroot.html0
http://java.oracle.com/
http://null.oracle.com/
http://crl.xrampsecurity.com/XGCA.crl
http://repository.swisssign.com/0
https://repo1.maven.org/maven2/net/java/dev/jna/jna/5.5.0/jna-5.5.0.jar
http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5
http://policy.camerfirma.com
https://ocsp.quovadisoffshore.com
https://repo1.maven.org/maven2/org/xerial/sqlite-jdbc/3.14.2.1/sqlite-jdbc-3.14.2.1.jar
http://crl.securetrust.com/STCA.crl0

Dropped files

Name File Type Hashes Detection
C:\cmdlinestart.log
 ASCII text, with CRLF, LF line terminators
 #
C:\jar\carLambo\nYKUJiPDMFquwRpKFElAD.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\bzlBSuuREhLCmheoxRLoe.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
Click to see the 64 hidden entries
C:\jar\carLambo\mdNVabGLtSgHprawsRQOv.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\lXiQWxbivgQpkaqCCfVKY.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\ktqJfqRpauSAGkfJbNchr.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\kqfTtOdPWqoSaOdKfHjPr.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\kKDEXLppEHnYcckGnnxxg.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\jsGSSBxDsfgZgmNRCCRge.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\iUmCoRfIFAQoefdxTBoVc.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\hccNzYOZzwIxSugKtwNFq.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\hYsqcGfbELOwxudanKXov.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\hWdmIbubOgKXDUyGkTEEB.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\hBkzOcczVKCAHBldijzvK.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\eauxCIrdjXbTstchfeoOk.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\dYjHcUTAJpBUzZmyvwxcg.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\cNhfmljIASGhxQnqNJuWx.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\yLBVjlynSgWMgvIJTRRcy.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\oGMqziBzYYxWXtOgENcol.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\qAnFfCeztBRNXnxmfAymy.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\qNjCcZeKvVwoJRxKdiCbn.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\qSvSnaYHzthBBeWOIMBaB.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\qcwPdWnKTLcdPxDSEKqai.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\resources\config.txt
 ASCII text, with no line terminators
 #
C:\jar\carLambo\sbsQDGLLzqONvAeirLUFR.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\sdQKOtlJzWCBporuolMyN.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\susnFxnUwlidMWpefYbJj.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\tSrrFgcYOfUSarEmZIkay.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\uinODIkCilGXJDaSnyVJx.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\unFpTnLKGCoDhhTwCythd.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\vISXLMxulVKJDJdBSbyBW.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\vPGWlacnCrelHWkRFSJnJ.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\wparXSrkmxMhKOZjMNKKu.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\ProgramData\Oracle\Java\.oracle_jre_usage\cce3fe3b0d8d83e2.timestamp
 ASCII text, with CRLF line terminators
 #
C:\jar\carLambo\HBrowserNativeApis.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\KFplBMCKgMdHvcMkaAGZa.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\JZxxYGNZPNJezbPxNUZCd.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\JXeuHETDDBNayfsmagXfz.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\JJNChPaoaJuTageKFIyUf.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\IsPDtEuhSpLxTtNBFQXAi.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\IjxLOzQLUDkaXnjBGOAoG.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\IXoamLVdxZHhnOCKEypnx.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\HhGNtKoTftxMhSSBMJnzt.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\Kernel32.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\GDI32.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\FirstRun.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\DaHdKpqpmbwOJzFdSfJTr.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\CSvxxbhsMkFgzwSLJPuno.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\BvHpAJlEksWthemKshuQp.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\AaISogscfReXxeZKUWBlO.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\META-INF\MANIFEST.MF
 ASCII text, with CRLF line terminators
 #
C:\jar\carLambo\bmfvovJGUyUbPgySKkkcq.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\KosQXPANrWiAsLTBDYIav.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\LTsbSrnXqNHTzSCadLztL.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\ONjFQMbZKhXUIvJECkqdG.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\RdldwsORcdxmkhJVwhbLi.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\SLINEyhIcNChZpywErVgS.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\TlNoUrOpQFTDEOhhEkJkV.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\TwJpMYXWnMJHKsRderDDT.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\UWPKqDtrtuRkfgJqVaIfH.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\User32.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\WinGDI.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\XmcgWVirDwLliVZTBfoxa.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\XtGDgqPPFsffwvuGLMVrE.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\YAscrrsjSCEINprDrLpVw.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\ZYEcYXbRzHYFyZblHqtZQ.class
 compiled Java class data, version 49.0 (Java 1.5)
 #
C:\jar\carLambo\bblLjaykILRsJuIgHpxpV.class
 compiled Java class data, version 49.0 (Java 1.5)
 #