Overview

overview

3

Static

static

1

FallDamageBlocker.zip

windows7-x64

1

FallDamageBlocker.zip

windows10-2004-x64

1

pom.xml

windows7-x64

1

pom.xml

windows10-2004-x64

1

src/main/j...n.java

windows7-x64

3

src/main/j...n.java

windows10-2004-x64

3

src/main/j...y.java

windows7-x64

3

src/main/j...y.java

windows10-2004-x64

3

src/main/j...d.java

windows7-x64

3

src/main/j...d.java

windows10-2004-x64

3

src/main/j...t.java

windows7-x64

3

src/main/j...t.java

windows10-2004-x64

3

src/main/j...r.java

windows7-x64

3

src/main/j...r.java

windows10-2004-x64

3

src/main/j...r.java

windows7-x64

3

src/main/j...r.java

windows10-2004-x64

3

src/main/j...s.java

windows7-x64

3

src/main/j...s.java

windows10-2004-x64

3

src/main/r...ig.yml

windows7-x64

3

src/main/r...ig.yml

windows10-2004-x64

3

src/main/r...in.yml

windows7-x64

3

src/main/r...in.yml

windows10-2004-x64

3

Analysis

  • max time kernel
    135s
  • max time network
    145s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08/06/2023, 08:07

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    src/main/java/dev/lotnest/falldamageblocker/file/ConfigHandler.java

  • Size

    691B

  • MD5

    03a08c5421b36c5c56f24a650c54fe7b

  • SHA1

    9fcd86a3f814c38a87734ae7f4db97419a0bdfe3

  • SHA256

    2fa1cec40a444bcf658a8dd400a1b076f3ac6359433723a36daf0e460fb9d254

  • SHA512

    52f66f4c1fd5ab796270f6948602b2793318688279350425b42e63ad0fe4714ad8f36fa8df74ac38e61f93b67fa2e956e442086b4999e2b4a7831400f9cf15e9

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\src\main\java\dev\lotnest\falldamageblocker\file\ConfigHandler.java
    1⤵
    • Modifies registry class
    PID:2604
  • C:\Windows\system32\OpenWith.exe
    C:\Windows\system32\OpenWith.exe -Embedding
    1⤵
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:4324

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads