2c4d8b48344ae221e349e525ac16eb364ffb5ab8deae80c7caa28dd5967cabdb

Analysis

max time kernel
150s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
19-03-2023 02:31

Target

TLauncher.exe
Size

6.3MB
MD5

f08d9bbc61cff8e8c3504524c3220bef
SHA1

b4268c667469620bb528c04eaa819d508159b398
SHA256

2c4d8b48344ae221e349e525ac16eb364ffb5ab8deae80c7caa28dd5967cabdb
SHA512

a64a03d959487399fb57e1bd062c0e9f88a17ff9b3ad15e6b96a4b7332341d0fc9186ef99b2ab9bdcfa51864f21d08bce48479202c01d15470916e90fb09fef4
SSDEEP

196608:/PIsbJRd4KIlsep5E8laWRtMGplAZQHW07v:HIqNbeY8la1Gpl/7

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

javaw.exe

pid process

4256 javaw.exe
4256 javaw.exe

pid	process
4256	javaw.exe
4256	javaw.exe

Suspicious use of WriteProcessMemory 2 IoCs

Processes:

TLauncher.exe

description	pid	process	target process
PID 2832 wrote to memory of 4256	2832	TLauncher.exe	javaw.exe
PID 2832 wrote to memory of 4256	2832	TLauncher.exe	javaw.exe

C:\Users\Admin\AppData\Local\Temp\TLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\TLauncher.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2832

C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe
"C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe" -jar "C:\Users\Admin\AppData\Local\Temp\TLauncher.exe"
2⤵
- Suspicious use of SetWindowsHookEx
PID:4256

memory/2832-133-0x0000000000400000-0x0000000000417000-memory.dmp

Filesize
92KB

Download
memory/4256-144-0x0000000000600000-0x0000000000601000-memory.dmp

Filesize
4KB

Download
memory/4256-154-0x0000000000600000-0x0000000000601000-memory.dmp

Filesize
4KB

Download
memory/4256-173-0x0000000000600000-0x0000000000601000-memory.dmp

Filesize
4KB

Download
memory/4256-180-0x0000000000600000-0x0000000000601000-memory.dmp

Filesize
4KB

Download
memory/4256-198-0x0000000000600000-0x0000000000601000-memory.dmp

Filesize
4KB

Download
memory/4256-212-0x0000000000600000-0x0000000000601000-memory.dmp

Filesize
4KB

Download
memory/4256-215-0x0000000000600000-0x0000000000601000-memory.dmp

Filesize
4KB

Download
memory/4256-221-0x0000000000600000-0x0000000000601000-memory.dmp

Filesize
4KB

Download
memory/4256-222-0x0000000000600000-0x0000000000601000-memory.dmp

Filesize
4KB

Download
memory/4256-230-0x0000000000600000-0x0000000000601000-memory.dmp

Filesize
4KB

Download
memory/4256-236-0x0000000000600000-0x0000000000601000-memory.dmp

Filesize
4KB

Download