Resubmissions

27/05/2023, 10:15

230527-l97klsbh6v 7

27/05/2023, 10:14

230527-l9tzhsbh6s 1

Analysis

  • max time kernel
    140s
  • max time network
    31s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    27/05/2023, 10:15

General

  • Target

    7Clicker-master/jnativehook-2.0.3.jar

  • Size

    188KB

  • MD5

    105b2b56bf43f91bad6715211a407f6e

  • SHA1

    73323bdff3d2672b8eea557d6deb45138d635484

  • SHA256

    d5f84ae5bc8b335c5a85d47edc839425ff183c61f7a75af60b39d762b807be32

  • SHA512

    9d67836602e0630f6ab17d41b668940b9ac74f8ac1e1650c06ece0aecf2035226bd737083fa57da48b39f124005d13b63d3f4c220bd420ee1ea51b60bbbaccb0

  • SSDEEP

    3072:jLP63q4rRcMVRfKhY/zMLjhyrSvnYbmm3Gv7XyzQdfkVFYO40Rg:juBfKhQz0wrS/+dOXycdfcFYmRg

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Suspicious use of SetWindowsHookEx 20 IoCs

Processes

  • C:\Windows\system32\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\7Clicker-master\jnativehook-2.0.3.jar
    1⤵
    • Loads dropped DLL
    • Suspicious use of SetWindowsHookEx
    PID:1340

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • \Users\Admin\AppData\Local\Temp\JNativeHook-2.0.3.dll

          Filesize

          83KB

          MD5

          55f4de7f270663b3dc712b8c9eed422a

          SHA1

          7432773eb4d09dc286d43fcc77ddb0e1e3bce2b4

          SHA256

          47c2871dff8948de40424df497962ea6167c56bd4d487dd2e660aa2837485e25

          SHA512

          9da5efb0236b3bb4ec72d07bfd70a9e3f373df95d97c825513babd43d2b91c8669e28f3464173e789dad092ea48fc8d32a9d11a6d5c8d9beeabd33860ce6a996

        • memory/1340-71-0x0000000000490000-0x000000000049A000-memory.dmp

          Filesize

          40KB

        • memory/1340-72-0x0000000000490000-0x000000000049A000-memory.dmp

          Filesize

          40KB

        • memory/1340-75-0x0000000000430000-0x0000000000431000-memory.dmp

          Filesize

          4KB

        • memory/1340-76-0x0000000065E40000-0x0000000065E55000-memory.dmp

          Filesize

          84KB

        • memory/1340-78-0x0000000000490000-0x000000000049A000-memory.dmp

          Filesize

          40KB

        • memory/1340-84-0x0000000065E40000-0x0000000065E55000-memory.dmp

          Filesize

          84KB

        • memory/1340-85-0x0000000065E40000-0x0000000065E55000-memory.dmp

          Filesize

          84KB

        • memory/1340-90-0x0000000065E40000-0x0000000065E55000-memory.dmp

          Filesize

          84KB