Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    20s
  • max time network
    24s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/09/2022, 16:06

General

  • Target

    forge-1.18.2-40.1.0-installer.jar

  • Size

    6.4MB

  • MD5

    db5df8dda42b3d788015a6d95dab169d

  • SHA1

    0496aa995ae2fc950fdac3adc92da486ac35fc3b

  • SHA256

    6ca31da822d2b918ba2db5bce895f42cd62525936ffc1be65d497710c7a71f82

  • SHA512

    b74d4a3c24491566d76c92919a6ae8f2b1225601ecb933f8fc2080d8e206afd39fb1e705d1083f8d6c3714a331281ec1ba5bea4ae2a5a47d8adcd999f1cd0e63

  • SSDEEP

    196608:9RHc/QocvNqxESU6flwewizg2gre21uyx:9R4YqtUY5LgSvyx

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\ProgramData\Oracle\Java\javapath\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\forge-1.18.2-40.1.0-installer.jar
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4616

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4616-136-0x0000000002D60000-0x0000000003D60000-memory.dmp

    Filesize

    16.0MB

  • memory/4616-149-0x0000000002D60000-0x0000000003D60000-memory.dmp

    Filesize

    16.0MB

  • memory/4616-156-0x0000000002D60000-0x0000000003D60000-memory.dmp

    Filesize

    16.0MB

  • memory/4616-166-0x0000000002D60000-0x0000000003D60000-memory.dmp

    Filesize

    16.0MB

  • memory/4616-172-0x0000000002D60000-0x0000000003D60000-memory.dmp

    Filesize

    16.0MB

  • memory/4616-181-0x0000000002D60000-0x0000000003D60000-memory.dmp

    Filesize

    16.0MB

  • memory/4616-185-0x0000000002D60000-0x0000000003D60000-memory.dmp

    Filesize

    16.0MB

  • memory/4616-189-0x0000000002D60000-0x0000000003D60000-memory.dmp

    Filesize

    16.0MB