2c4d8b48344ae221e349e525ac16eb364ffb5ab8deae80c7caa28dd5967cabdb

Analysis

max time kernel
32s
max time network
36s
platform
windows10-1703_x64
resource
win10-20230220-en
resource tags

arch:x64arch:x86image:win10-20230220-enlocale:en-usos:windows10-1703-x64system
submitted
01/04/2023, 05:45

Target

TLauncher.exe
Size

6.3MB
MD5

f08d9bbc61cff8e8c3504524c3220bef
SHA1

b4268c667469620bb528c04eaa819d508159b398
SHA256

2c4d8b48344ae221e349e525ac16eb364ffb5ab8deae80c7caa28dd5967cabdb
SHA512

a64a03d959487399fb57e1bd062c0e9f88a17ff9b3ad15e6b96a4b7332341d0fc9186ef99b2ab9bdcfa51864f21d08bce48479202c01d15470916e90fb09fef4
SSDEEP

196608:/PIsbJRd4KIlsep5E8laWRtMGplAZQHW07v:HIqNbeY8la1Gpl/7

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1832	javaw.exe
1832	javaw.exe

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 3476 wrote to memory of 1832	3476	TLauncher.exe	66
PID 3476 wrote to memory of 1832	3476	TLauncher.exe	66

C:\Users\Admin\AppData\Local\Temp\TLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\TLauncher.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3476
- C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe
  "C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe" -jar "C:\Users\Admin\AppData\Local\Temp\TLauncher.exe"
  2⤵
  - Suspicious use of SetWindowsHookEx
  PID:1832

memory/1832-128-0x0000000000A80000-0x0000000000A81000-memory.dmp

Filesize
4KB

Download
memory/1832-139-0x0000000000A80000-0x0000000000A81000-memory.dmp

Filesize
4KB

Download
memory/1832-159-0x0000000000A80000-0x0000000000A81000-memory.dmp

Filesize
4KB

Download
memory/1832-164-0x0000000000A80000-0x0000000000A81000-memory.dmp

Filesize
4KB

Download
memory/1832-168-0x0000000000A80000-0x0000000000A81000-memory.dmp

Filesize
4KB

Download
memory/1832-173-0x0000000000A80000-0x0000000000A81000-memory.dmp

Filesize
4KB

Download
memory/3476-117-0x0000000000400000-0x0000000000417000-memory.dmp

Filesize
92KB

Download