Resubmissions

30-03-2023 21:10

230330-zz71aaec38 7

30-03-2023 21:09

230330-zzyrlsec36 1

Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-1703_x64
  • resource
    win10-20230220-en
  • resource tags

    arch:x64arch:x86image:win10-20230220-enlocale:en-usos:windows10-1703-x64system
  • submitted
    30-03-2023 21:10

General

  • Target

    SKlauncher 3.0.1.jar

  • Size

    1.0MB

  • MD5

    4092008c33525b2df13a941c342db154

  • SHA1

    677f043525fee3a438c9a5f98ec088cc1fbec9a1

  • SHA256

    8e414e5789984690cd1d2221db3954eb0b6457aadf68f26b0da564f859d0ea9f

  • SHA512

    d889c9534e8b2201ff69e4d3177e514ae257e1cba8b8d8b23acc10a67ecc1c9450a070822173d261aeca3c23db8fbd412f50f2045c51ca4c1dcb278efd5878ef

  • SSDEEP

    24576:1ch6p4Mea7FdQKaikK21SHCJ3ny+SGiPsGIaRtLCg/e0cU2cxE:1+gFiKai1viny6iPHXrD/e0IsE

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\ProgramData\Oracle\Java\javapath\java.exe
    java -jar "C:\Users\Admin\AppData\Local\Temp\SKlauncher 3.0.1.jar"
    1⤵
    • Loads dropped DLL
    • Suspicious use of SetWindowsHookEx
    PID:420

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\.minecraft\sklauncher-fx.jar

    Filesize

    14.5MB

    MD5

    5d07975f396dc1cfbbb7c85926e6cb3a

    SHA1

    990307bcbe268445a1ffd007e45cbed4afe4f336

    SHA256

    4a99710f158f6b1b9f7efa6140906f94b2e4f1d3c00d5ae9b3020c8fd98d8d9b

    SHA512

    0af4c95de5490dcf130aa76d4c60fad89fb906fef37880a45718576c100f44ac651dec0745074a7ee10b1e7ea849d3e7227a936a607c86f7148845274d06dab4

  • \Users\Admin\AppData\Local\Temp\flatlaf.temp\flatlaf-windows-x86_64-4052457422200.dll

    Filesize

    21KB

    MD5

    4ca3290a99adadde557930cd481d7539

    SHA1

    26034442a76131dd3d37c8f28b6e9bebc7c1fe7c

    SHA256

    dd130c68dc36bcedbe51a6b8ec3b3358a460d45952f6280e12331f48850b6b3b

    SHA512

    9341c60f92dd3f89f82555055924bdae6fcce1e4cd13a7dde5129ebdce04bae377292237a2ed6c3e7623b242e82b01c7ed1717af4d7db8ca473e9fd7b7b190d5

  • memory/420-226-0x0000000000490000-0x0000000000491000-memory.dmp

    Filesize

    4KB

  • memory/420-301-0x0000000000490000-0x0000000000491000-memory.dmp

    Filesize

    4KB

  • memory/420-127-0x0000000000490000-0x0000000000491000-memory.dmp

    Filesize

    4KB

  • memory/420-200-0x0000000000490000-0x0000000000491000-memory.dmp

    Filesize

    4KB

  • memory/420-207-0x0000000000490000-0x0000000000491000-memory.dmp

    Filesize

    4KB

  • memory/420-208-0x0000000000490000-0x0000000000491000-memory.dmp

    Filesize

    4KB

  • memory/420-209-0x0000000000490000-0x0000000000491000-memory.dmp

    Filesize

    4KB

  • memory/420-215-0x0000000000490000-0x0000000000491000-memory.dmp

    Filesize

    4KB

  • memory/420-221-0x0000000000490000-0x0000000000491000-memory.dmp

    Filesize

    4KB

  • memory/420-229-0x0000000000490000-0x0000000000491000-memory.dmp

    Filesize

    4KB

  • memory/420-195-0x0000000000490000-0x0000000000491000-memory.dmp

    Filesize

    4KB

  • memory/420-181-0x0000000000490000-0x0000000000491000-memory.dmp

    Filesize

    4KB

  • memory/420-225-0x0000000000490000-0x0000000000491000-memory.dmp

    Filesize

    4KB

  • memory/420-240-0x0000000000490000-0x0000000000491000-memory.dmp

    Filesize

    4KB

  • memory/420-246-0x0000000000490000-0x0000000000491000-memory.dmp

    Filesize

    4KB

  • memory/420-248-0x0000000000490000-0x0000000000491000-memory.dmp

    Filesize

    4KB

  • memory/420-251-0x0000000000490000-0x0000000000491000-memory.dmp

    Filesize

    4KB

  • memory/420-135-0x0000000000490000-0x0000000000491000-memory.dmp

    Filesize

    4KB

  • memory/420-280-0x0000000000490000-0x0000000000491000-memory.dmp

    Filesize

    4KB

  • memory/420-284-0x0000000000490000-0x0000000000491000-memory.dmp

    Filesize

    4KB

  • memory/420-285-0x0000000000490000-0x0000000000491000-memory.dmp

    Filesize

    4KB

  • memory/420-296-0x0000000000490000-0x0000000000491000-memory.dmp

    Filesize

    4KB

  • memory/420-227-0x0000000000490000-0x0000000000491000-memory.dmp

    Filesize

    4KB