Analysis

  • max time kernel
    74s
  • max time network
    49s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    11-02-2023 17:12

General

  • Target

    BatMod_Installer.jar

  • Size

    798KB

  • MD5

    f121857a77c60c918821ad721bc69956

  • SHA1

    4ef62393a357dd47b0a1ff7a2d092a2e5644c8e3

  • SHA256

    b396436bf9a4a9013fb2ecb128c0e1a81962be09b786e090fb9dedf602438237

  • SHA512

    fe34a73b5fd83705ac05f6c708dc817deff66c4a938007cb84565c114fbb80930a01a6cd00081610fda53f74839e1893c24943248206e8994118771ebf070484

  • SSDEEP

    24576:BuMpSaU6VqH2awAc/67YsypLc/eqNOY92ydHNCes:Bh1fVs2967Yhtc/eqNGqtTs

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Windows\system32\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\BatMod_Installer.jar
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1708

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1708-54-0x000007FEFC331000-0x000007FEFC333000-memory.dmp

    Filesize

    8KB

  • memory/1708-64-0x0000000002220000-0x0000000005220000-memory.dmp

    Filesize

    48.0MB

  • memory/1708-68-0x00000000002B0000-0x00000000002BA000-memory.dmp

    Filesize

    40KB

  • memory/1708-69-0x00000000002B0000-0x00000000002BA000-memory.dmp

    Filesize

    40KB

  • memory/1708-71-0x0000000002220000-0x0000000005220000-memory.dmp

    Filesize

    48.0MB

  • memory/1708-72-0x00000000002B0000-0x00000000002BA000-memory.dmp

    Filesize

    40KB

  • memory/1708-73-0x00000000002B0000-0x00000000002BA000-memory.dmp

    Filesize

    40KB