Resubmissions

29-10-2021 12:58

211029-p7t4aaaael 1

29-10-2021 12:10

211029-pb7z9saaak 1

Analysis

  • max time kernel
    135s
  • max time network
    163s
  • platform
    windows10_x64
  • resource
    win10-en-20210920
  • submitted
    29-10-2021 12:10

General

  • Target

    INV-7776-TCLTD.jar

  • Size

    495KB

  • MD5

    dd3331428fe8070e0cd89a20b1c4620f

  • SHA1

    68c1c50083d968c5b92937cf8a87bc1c1df69420

  • SHA256

    2c452e378b2ad8e0192bc804096eae9abc1e3fa3b9bd9cce4994217acfa239b9

  • SHA512

    e0521d421243ab84c2c42d93bd5f09d229c08d9d21c284267225327020bca9aa84019674f9f6b6aaca23ec451a427287c64c4cfea64f913f5c0c5da02edc7666

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\ProgramData\Oracle\Java\javapath\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\INV-7776-TCLTD.jar
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4332

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4332-115-0x00000000023E0000-0x0000000002650000-memory.dmp

    Filesize

    2.4MB

  • memory/4332-116-0x00000000023E0000-0x0000000002650000-memory.dmp

    Filesize

    2.4MB

  • memory/4332-117-0x00000000004E0000-0x00000000004E1000-memory.dmp

    Filesize

    4KB

  • memory/4332-118-0x00000000004E0000-0x00000000004E1000-memory.dmp

    Filesize

    4KB

  • memory/4332-119-0x00000000004E0000-0x00000000004E1000-memory.dmp

    Filesize

    4KB

  • memory/4332-121-0x0000000002660000-0x0000000002670000-memory.dmp

    Filesize

    64KB

  • memory/4332-120-0x0000000002650000-0x0000000002660000-memory.dmp

    Filesize

    64KB

  • memory/4332-123-0x0000000002680000-0x0000000002690000-memory.dmp

    Filesize

    64KB

  • memory/4332-122-0x0000000002670000-0x0000000002680000-memory.dmp

    Filesize

    64KB

  • memory/4332-124-0x0000000002690000-0x00000000026A0000-memory.dmp

    Filesize

    64KB

  • memory/4332-125-0x00000000004E0000-0x00000000004E1000-memory.dmp

    Filesize

    4KB

  • memory/4332-129-0x00000000004E0000-0x00000000004E1000-memory.dmp

    Filesize

    4KB

  • memory/4332-130-0x00000000026A0000-0x00000000026B0000-memory.dmp

    Filesize

    64KB

  • memory/4332-131-0x00000000004E0000-0x00000000004E1000-memory.dmp

    Filesize

    4KB

  • memory/4332-135-0x00000000026B0000-0x00000000026C0000-memory.dmp

    Filesize

    64KB

  • memory/4332-136-0x00000000026C0000-0x00000000026D0000-memory.dmp

    Filesize

    64KB