107bb526c374d6fd9f45317c0c16e83ab50076f2bcd630caf3d6794596fae69b

Analysis

max time kernel
44s
max time network
49s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
02/03/2023, 02:15

Target
SKlauncher 3.0.exe
Size 1.2MB
Sample230302-cplmzaag31
SHA256 107bb526c374d6fd9f45317c0c16e83ab50076f2bcd630caf3d6794596fae69b
MD5 32c7e3347f8e532e675d154eb07f4ccf
SHA1 5ca004745e2cdab497a7d6ef29c7efb25dc4046d
SHA512 c82f3a01719f30cbb876a1395fda713ddba07b570bc188515b1b705e54e15a7cca5f71f741d51763f63aa5f40e00df06f63b341ed4db6b1be87b3ee59460dbe2
SSDEEP 24576:Dh199z42ojP6a7HJlF9eu5XFQZSIZeNGdmEE8H17UBcegl:R9zbgH3euNFQZr/oEE892cfl
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Loads dropped DLL 1 IoCs

pid	Process
1944	javaw.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1944	javaw.exe
1944	javaw.exe

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 2548 wrote to memory of 1944	2548	SKlauncher 3.0.exe	84
PID 2548 wrote to memory of 1944	2548	SKlauncher 3.0.exe	84

C:\Users\Admin\AppData\Local\Temp\SKlauncher 3.0.exe
"C:\Users\Admin\AppData\Local\Temp\SKlauncher 3.0.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2548
- C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe
  "C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe" -Xms32m -Xmx256m -jar "C:\Users\Admin\AppData\Local\Temp\SKlauncher 3.0.exe"
  2⤵
  - Loads dropped DLL
  - Suspicious use of SetWindowsHookEx
  PID:1944

flatlaf-windows-x86_64-4420064411000.dll

Path C:\Users\Admin\AppData\Local\Temp\flatlaf.temp\flatlaf-windows-x86_64-4420064411000.dll
Size 9KB
SHA256 a7273a4cf48ab3413f2c186cc95a3367a73ce99f8d45329383219d4cc27003aa
MD5 697d496ac9f5aaab8ae025322358c61e
SHA1 2043eac8cdcc2e24b854af1eacd77a5f2a395a27
SHA512 b6702cd49a3af9f97f697565136f140692af9f8b271e672f2e91c920a23212b778583786f2377078117113647926338614a92c4a2423318b7a21ba2fe3a89838
SSDEEP 192:C4ZynXsoPX3dGJwNW6UbBMTaSCLGTFyZsRSfP5x35+:C4ZeX9PX3RWzbBMRCmyZsE5xp+
MD5 SHA1 SHA512 SSDEEP

Submit Download

memory/1944-146-0x00000000018D0000-0x00000000018D1000-memory.dmp

Download

memory/1944-151-0x00000000018D0000-0x00000000018D1000-memory.dmp

Download

memory/1944-184-0x00000000018D0000-0x00000000018D1000-memory.dmp

Download

memory/2548-133-0x0000000000400000-0x0000000000435000-memory.dmp

Download