a309308aa7ad8b30bf8f62b804dbfcb794d2d55d895d362cc45503595562897e

Analysis

max time kernel
140s
max time network
34s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
12/03/2023, 12:11

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

LauncherFenix-Minecraft-6.exe
Size

387KB
MD5

71a957903c26c519387c5caffa437b18
SHA1

16aced989c1439f0f6a73c1600c766cfe8b89cf7
SHA256

a309308aa7ad8b30bf8f62b804dbfcb794d2d55d895d362cc45503595562897e
SHA512

c49b16f76f871b38ee17e0f34b4ccdab597df6a80bc09ee00a6b25024ae033332ff772754353cbdf813ddf61c5e3e83cbe78af9915877514ec546735b40d897e
SSDEEP

3072:RGFxfR8Yc4iBqY07mu+hmP30o5Bdyhq68Ty4FSs:UF0qY07/ko5BIhaT5FSs

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1700	javaw.exe
1700	javaw.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1516 wrote to memory of 1700	1516	LauncherFenix-Minecraft-6.exe	28
PID 1516 wrote to memory of 1700	1516	LauncherFenix-Minecraft-6.exe	28
PID 1516 wrote to memory of 1700	1516	LauncherFenix-Minecraft-6.exe	28
PID 1516 wrote to memory of 1700	1516	LauncherFenix-Minecraft-6.exe	28

C:\Users\Admin\AppData\Local\Temp\LauncherFenix-Minecraft-6.exe
"C:\Users\Admin\AppData\Local\Temp\LauncherFenix-Minecraft-6.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1516
- C:\Program Files\Java\jre7\bin\javaw.exe
  "C:\Program Files\Java\jre7\bin\javaw.exe" -jar "C:\Users\Admin\AppData\Local\Temp\LauncherFenix-Minecraft-6.exe"
  2⤵
  - Suspicious use of SetWindowsHookEx
  PID:1700

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1516-70-0x0000000000400000-0x000000000045D000-memory.dmp

Filesize
372KB

Download
memory/1700-113-0x0000000000310000-0x0000000000311000-memory.dmp

Filesize
4KB

Download
memory/1700-119-0x0000000000310000-0x0000000000311000-memory.dmp

Filesize
4KB

Download
memory/1700-67-0x0000000001D30000-0x0000000001D3A000-memory.dmp

Filesize
40KB

Download
memory/1700-66-0x0000000001D30000-0x0000000001D3A000-memory.dmp

Filesize
40KB

Download
memory/1700-88-0x0000000000310000-0x0000000000311000-memory.dmp

Filesize
4KB

Download
memory/1700-92-0x0000000001D30000-0x0000000001D3A000-memory.dmp

Filesize
40KB

Download
memory/1700-95-0x0000000001D30000-0x0000000001D3A000-memory.dmp

Filesize
40KB

Download
memory/1700-98-0x0000000000310000-0x0000000000311000-memory.dmp

Filesize
4KB

Download
memory/1700-69-0x0000000000310000-0x0000000000311000-memory.dmp

Filesize
4KB

Download
memory/1700-112-0x0000000000310000-0x0000000000311000-memory.dmp

Filesize
4KB

Download
memory/1700-77-0x0000000000310000-0x0000000000311000-memory.dmp

Filesize
4KB

Download
memory/1700-120-0x0000000002060000-0x000000000206A000-memory.dmp

Filesize
40KB

Download
memory/1700-123-0x0000000002060000-0x000000000206A000-memory.dmp

Filesize
40KB

Download
memory/1700-124-0x0000000002060000-0x000000000206A000-memory.dmp

Filesize
40KB

Download
memory/1700-125-0x0000000000310000-0x0000000000311000-memory.dmp

Filesize
4KB

Download
memory/1700-132-0x0000000000310000-0x0000000000311000-memory.dmp

Filesize
4KB

Download
memory/1700-133-0x0000000000310000-0x0000000000311000-memory.dmp

Filesize
4KB

Download
memory/1700-138-0x0000000000310000-0x0000000000311000-memory.dmp

Filesize
4KB

Download
memory/1700-142-0x0000000000310000-0x0000000000311000-memory.dmp

Filesize
4KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads