Analysis
- max time kernel
150s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20230220-en - resource tags
- submitted
30/03/2023, 18:00
General
- Target SKlauncher 3.0.0.exe
- Size 1.2MB
- Sample230330-wlhlpadf97
- SHA256 107bb526c374d6fd9f45317c0c16e83ab50076f2bcd630caf3d6794596fae69b
Malware Config
Signatures
- Loads dropped DLL 1 IoCs
- Suspicious use of SetWindowsHookEx 2 IoCs
- Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\SKlauncher 3.0.0.exe"C:\Users\Admin\AppData\Local\Temp\SKlauncher 3.0.0.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe"C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe" -Xms32m -Xmx256m -jar "C:\Users\Admin\AppData\Local\Temp\SKlauncher 3.0.0.exe"2⤵
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
flatlaf-windows-x86_64-4163877743000.dll
memory/1668-133-0x0000000000400000-0x0000000000435000-memory.dmp
memory/3676-191-0x0000000002A30000-0x0000000002A31000-memory.dmp
memory/3676-208-0x0000000002A30000-0x0000000002A31000-memory.dmp
memory/3676-168-0x0000000002A30000-0x0000000002A31000-memory.dmp
memory/3676-177-0x0000000002A30000-0x0000000002A31000-memory.dmp
memory/3676-178-0x0000000002A30000-0x0000000002A31000-memory.dmp
memory/3676-185-0x0000000002A30000-0x0000000002A31000-memory.dmp
memory/3676-146-0x0000000002A30000-0x0000000002A31000-memory.dmp
memory/3676-193-0x0000000002A30000-0x0000000002A31000-memory.dmp
memory/3676-196-0x0000000002A30000-0x0000000002A31000-memory.dmp
memory/3676-151-0x0000000002A30000-0x0000000002A31000-memory.dmp
memory/3676-213-0x0000000002A30000-0x0000000002A31000-memory.dmp
memory/3676-243-0x0000000002A30000-0x0000000002A31000-memory.dmp
memory/3676-248-0x0000000002A30000-0x0000000002A31000-memory.dmp
memory/3676-249-0x0000000002A30000-0x0000000002A31000-memory.dmp
memory/3676-250-0x0000000002A30000-0x0000000002A31000-memory.dmp
memory/3676-251-0x0000000002A30000-0x0000000002A31000-memory.dmp
memory/3676-274-0x0000000002A30000-0x0000000002A31000-memory.dmp