Benign Download

Trojan.Java.Needy.a

Java bytecode Runtime.exec callJava bytecode file deletion

SHA-256f91eb641b3a550e6cd02a74f201fc340582a908a3d0bde282c1c51f9383f945b

Evidence

JVM imports FileOutputStream class 0x424–0x4f4

⋯3 more rows
0x454000328295a0a003f004607004b010018..()Z..?.F..K...
0x4646a6176612f696f2f46696c654f757470java/io/FileOutp
0x474757453747265616d0a004a004307004eutStream..J.C..N
0x4840100136a6176612f696f2f5072696e74...java/io/Print
⋯7 more rows

Java bytecode file deletion 0x532–0x692

⋯5 more rows
0x582612f6c616e672f52756e74696d650c00a/lang/Runtime..
0x59266006701000465786563010028285b4cf.g...exec..(([L
0x5a26a6176612f6c616e672f537472696e67java/lang/String
0x5b23b294c6a6176612f6c616e672f50726f;)Ljava/lang/Pro
0x5c2636573733b0a006300650c006a006b01cess;..c.e..j.k.
0x5d2000777616974466f720100032829490a..waitFor...()I.
0x5e2006d006907006e0100116a6176612f6c.m.i..n...java/l
0x5f2616e672f50726f636573730c00700048ang/Process..p.H
0x60201000664656c6574650a003f006f0700...delete..?.o..
0x612730100136a6176612f6c616e672f5468s...java/lang/Th
0x622726f7761626c6501000a536f75726365rowable...Source
⋯7 more rows