Analysis
- max time kernel
54s - max time network
57s - platform
windows10-2004_x64 - resource
win10v2004-20221111-en - resource tags
- submitted
31/01/2023, 06:40
General
- Target ImpactInstaller-0.9.5.exe
- Size 2.4MB
- Sample230131-hfcatseh57
- SHA256 bc583bd3d5327eb9b45896ea9ae2a504b28029f3b7ac27fd065d28af71db1bd2
Score
4/10
Malware Config
Signatures
- Drops file in Program Files directory 12 IoCs
- Suspicious use of SetWindowsHookEx 2 IoCs
- Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ImpactInstaller-0.9.5.exe"C:\Users\Admin\AppData\Local\Temp\ImpactInstaller-0.9.5.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe"C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe" -classpath "C:\Users\Admin\AppData\Local\Temp\ImpactInstaller-0.9.5.exe;lib\installer-0.9.5.jar" io.github.ImpactDevelopment.installer.Installer2⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4380-142-0x00000000029C0000-0x00000000039C0000-memory.dmp
memory/4380-159-0x00000000029C0000-0x00000000039C0000-memory.dmp
memory/4380-160-0x00000000029C0000-0x00000000039C0000-memory.dmp