Overview

overview

4

Static

static

TLauncher-2.72.jar

windows7-x64

1

TLauncher-2.72.jar

windows10-2004-x64

4

Analysis

  • max time kernel
    107s
  • max time network
    72s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    28/12/2022, 09:18

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    TLauncher-2.72.jar

  • Size

    4.3MB

  • MD5

    2f869045d5d93db0234a2f87f2a00208

  • SHA1

    6ca9dec27567533e9bc3873be81399f0e8c0d6e3

  • SHA256

    7395fdf90991d22c4059b1ee5e9ed8e0d42aed158d761c1ff9ed61aa3b00a222

  • SHA512

    22ee7d9025c9b9fccdf69b60fa88f7570c767cd0e8c89d5435a49ba703a48f0a66fc78add06f9edbf83738ba6ae0ada92d92c67808b60c797d38ef365d5a9c6c

  • SSDEEP

    98304:yD6IYIrnOEqmCBlOLc85tuxtg6aud5HdJ:21ORszuxtg6auvf

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 4 IoCs

Processes

  • C:\Windows\system32\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\TLauncher-2.72.jar
    1⤵
      PID:2044
    • C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      1⤵
        PID:1548
      • C:\Windows\system32\AUDIODG.EXE
        C:\Windows\system32\AUDIODG.EXE 0x540
        1⤵
        • Suspicious use of AdjustPrivilegeToken
        PID:792

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/2044-54-0x000007FEFC251000-0x000007FEFC253000-memory.dmp

              Filesize

              8KB

              Download

            • memory/2044-57-0x0000000002260000-0x0000000005260000-memory.dmp

              Filesize

              48.0MB

              Download