Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

01/02/2023, 08:35

230201-khbhesed7z 1

01/02/2023, 08:15

230201-j5w7zace47 6

Analysis

  • max time kernel
    20s
  • max time network
    34s
  • platform
    windows10-1703_x64
  • resource
    win10-20220901-en
  • resource tags

    arch:x64arch:x86image:win10-20220901-enlocale:en-usos:windows10-1703-x64system
  • submitted
    01/02/2023, 08:35

General

  • Target

    Minecraft Launcher.exe

  • Size

    4.4MB

  • MD5

    62da1cde5869df964fc628ab9d226fb4

  • SHA1

    6b4ebcd1685180d4e4477f5a7e9c36138e2e9aed

  • SHA256

    51a8d363bee48c41e89fc5ff6b9659d93d9521d94b824df9cf907588c2246f44

  • SHA512

    d29dc55c6ef957e624f445ca746db1e0bc4ba543df6e4aea4dc2f0ed8284bab80ff6268dc834722d695044cd1bb32cd6ca2086327aee22312b3d33bbd6b33d97

  • SSDEEP

    98304:9Gz4kB1F8O+ZJpzMkqvc+tymgjSnm2Mwp3CTua:9YBcO+P2kqvchunHMwp3CTua

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Minecraft Launcher.exe
    "C:\Users\Admin\AppData\Local\Temp\Minecraft Launcher.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1928
    • C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe
      "C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe" -Xms256m -Xmx512m -jar "C:\Users\Admin\AppData\Local\Temp\Minecraft Launcher.exe"
      2⤵
      • Suspicious use of SetWindowsHookEx
      PID:4240

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1928-120-0x0000000077D70000-0x0000000077EFE000-memory.dmp

    Filesize

    1.6MB

  • memory/1928-121-0x0000000077D70000-0x0000000077EFE000-memory.dmp

    Filesize

    1.6MB

  • memory/1928-122-0x0000000077D70000-0x0000000077EFE000-memory.dmp

    Filesize

    1.6MB

  • memory/1928-123-0x0000000077D70000-0x0000000077EFE000-memory.dmp

    Filesize

    1.6MB

  • memory/1928-124-0x0000000077D70000-0x0000000077EFE000-memory.dmp

    Filesize

    1.6MB

  • memory/1928-125-0x0000000077D70000-0x0000000077EFE000-memory.dmp

    Filesize

    1.6MB

  • memory/1928-126-0x0000000077D70000-0x0000000077EFE000-memory.dmp

    Filesize

    1.6MB

  • memory/1928-127-0x0000000077D70000-0x0000000077EFE000-memory.dmp

    Filesize

    1.6MB

  • memory/1928-128-0x0000000077D70000-0x0000000077EFE000-memory.dmp

    Filesize

    1.6MB

  • memory/1928-129-0x0000000077D70000-0x0000000077EFE000-memory.dmp

    Filesize

    1.6MB

  • memory/1928-130-0x0000000077D70000-0x0000000077EFE000-memory.dmp

    Filesize

    1.6MB

  • memory/1928-131-0x0000000077D70000-0x0000000077EFE000-memory.dmp

    Filesize

    1.6MB

  • memory/1928-132-0x0000000077D70000-0x0000000077EFE000-memory.dmp

    Filesize

    1.6MB

  • memory/1928-133-0x0000000077D70000-0x0000000077EFE000-memory.dmp

    Filesize

    1.6MB

  • memory/1928-134-0x0000000077D70000-0x0000000077EFE000-memory.dmp

    Filesize

    1.6MB

  • memory/1928-135-0x0000000077D70000-0x0000000077EFE000-memory.dmp

    Filesize

    1.6MB

  • memory/1928-136-0x0000000077D70000-0x0000000077EFE000-memory.dmp

    Filesize

    1.6MB

  • memory/1928-137-0x0000000077D70000-0x0000000077EFE000-memory.dmp

    Filesize

    1.6MB

  • memory/1928-138-0x0000000077D70000-0x0000000077EFE000-memory.dmp

    Filesize

    1.6MB

  • memory/1928-139-0x0000000077D70000-0x0000000077EFE000-memory.dmp

    Filesize

    1.6MB

  • memory/1928-140-0x0000000077D70000-0x0000000077EFE000-memory.dmp

    Filesize

    1.6MB

  • memory/1928-141-0x0000000077D70000-0x0000000077EFE000-memory.dmp

    Filesize

    1.6MB

  • memory/1928-142-0x0000000077D70000-0x0000000077EFE000-memory.dmp

    Filesize

    1.6MB

  • memory/1928-143-0x0000000077D70000-0x0000000077EFE000-memory.dmp

    Filesize

    1.6MB

  • memory/1928-144-0x0000000077D70000-0x0000000077EFE000-memory.dmp

    Filesize

    1.6MB

  • memory/1928-145-0x0000000077D70000-0x0000000077EFE000-memory.dmp

    Filesize

    1.6MB

  • memory/1928-146-0x0000000077D70000-0x0000000077EFE000-memory.dmp

    Filesize

    1.6MB

  • memory/1928-147-0x0000000077D70000-0x0000000077EFE000-memory.dmp

    Filesize

    1.6MB

  • memory/1928-148-0x0000000077D70000-0x0000000077EFE000-memory.dmp

    Filesize

    1.6MB

  • memory/1928-149-0x0000000077D70000-0x0000000077EFE000-memory.dmp

    Filesize

    1.6MB

  • memory/1928-150-0x0000000077D70000-0x0000000077EFE000-memory.dmp

    Filesize

    1.6MB

  • memory/1928-151-0x0000000077D70000-0x0000000077EFE000-memory.dmp

    Filesize

    1.6MB

  • memory/1928-152-0x0000000077D70000-0x0000000077EFE000-memory.dmp

    Filesize

    1.6MB

  • memory/1928-153-0x0000000077D70000-0x0000000077EFE000-memory.dmp

    Filesize

    1.6MB

  • memory/1928-154-0x0000000077D70000-0x0000000077EFE000-memory.dmp

    Filesize

    1.6MB

  • memory/1928-155-0x0000000077D70000-0x0000000077EFE000-memory.dmp

    Filesize

    1.6MB

  • memory/1928-156-0x0000000077D70000-0x0000000077EFE000-memory.dmp

    Filesize

    1.6MB

  • memory/1928-157-0x0000000077D70000-0x0000000077EFE000-memory.dmp

    Filesize

    1.6MB

  • memory/1928-158-0x0000000077D70000-0x0000000077EFE000-memory.dmp

    Filesize

    1.6MB

  • memory/4240-167-0x0000000002C70000-0x0000000003C70000-memory.dmp

    Filesize

    16.0MB

  • memory/4240-176-0x0000000002C70000-0x0000000003C70000-memory.dmp

    Filesize

    16.0MB

  • memory/4240-178-0x0000000002C70000-0x0000000003C70000-memory.dmp

    Filesize

    16.0MB

  • memory/4240-181-0x0000000002C70000-0x0000000003C70000-memory.dmp

    Filesize

    16.0MB

  • memory/4240-186-0x0000000002C70000-0x0000000003C70000-memory.dmp

    Filesize

    16.0MB

  • memory/4240-187-0x0000000002C70000-0x0000000003C70000-memory.dmp

    Filesize

    16.0MB

  • memory/4240-190-0x0000000002C70000-0x0000000003C70000-memory.dmp

    Filesize

    16.0MB

  • memory/4240-194-0x0000000002C70000-0x0000000003C70000-memory.dmp

    Filesize

    16.0MB