5ea360e48bfba952189f0c791b95788c7e213c55b34adb480714ecb6108dedcb

Analysis

max time kernel
45s
max time network
79s
platform
windows10-2004_x64
resource
win10v2004-20230703-es
resource tags

arch:x64arch:x86image:win10v2004-20230703-eslocale:es-esos:windows10-2004-x64systemwindows
submitted
17/07/2023, 23:15

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

ScratchJr-1.3.2.Setup.exe
Size

118.3MB
MD5

8bff13451ce27981df17f271ff22c5b7
SHA1

44a773254df7ddf087a3cb644f3c67e5fc9a3894
SHA256

5ea360e48bfba952189f0c791b95788c7e213c55b34adb480714ecb6108dedcb
SHA512

025016ca0efbed1b4bc75a117a46098f2fd39c5771276edffcfb7e43b845daff505d2fc1a72e27079c8a3be0ba5a6d7d7800901142691d4a0a4b8b1dbf4b709b
SSDEEP

3145728:09Gkd1lWHzRWXm477IR34GMGE3LyPI/JAn:cRdbuwVOIf3LyA/an

Score

7^/10

Malware Config

Signatures

Executes dropped EXE 1 IoCs

pid	Process
1924	Update.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1924	Update.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3716 wrote to memory of 1924	3716	ScratchJr-1.3.2.Setup.exe	90
PID 3716 wrote to memory of 1924	3716	ScratchJr-1.3.2.Setup.exe	90
PID 3716 wrote to memory of 1924	3716	ScratchJr-1.3.2.Setup.exe	90

C:\Users\Admin\AppData\Local\Temp\ScratchJr-1.3.2.Setup.exe
"C:\Users\Admin\AppData\Local\Temp\ScratchJr-1.3.2.Setup.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3716
- C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
  "C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe" --install .
  2⤵
  - Executes dropped EXE
  - Suspicious use of FindShellTrayWindow
  PID:1924
- - C:\Users\Admin\AppData\Local\ScratchJr\app-1.3.2\Squirrel.exe
    "C:\Users\Admin\AppData\Local\ScratchJr\app-1.3.2\Squirrel.exe" --updateSelf=C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
    3⤵
    PID:3568
- - C:\Users\Admin\AppData\Local\ScratchJr\app-1.3.2\ScratchJr.exe
    "C:\Users\Admin\AppData\Local\ScratchJr\app-1.3.2\ScratchJr.exe" --squirrel-install 1.3.2
    3⤵
    PID:4712

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\ScratchJr\app-1.3.2\MSVCP140.dll

Filesize
618KB

MD5
9ff712c25312821b8aec84c4f8782a34

SHA1
1a7a250d92a59c3af72a9573cffec2fcfa525f33

SHA256
517cd3aac2177a357cca6032f07ad7360ee8ca212a02dd6e1301bf6cfade2094

SHA512
5a65da337e64ea42bcc461b411ae622ce4dec1036638b1e5de4757b366875d7f13c1290f2ee345f358994f648c5941db35aa5d2313f547605508fd2bcc047e33

Download Submit
C:\Users\Admin\AppData\Local\ScratchJr\app-1.3.2\ScratchJr.exe

Filesize
46.4MB

MD5
cecba7160a375426ce2ee8b57a97bb9e

SHA1
607bd32074be90207481d648308a98384668b8c5

SHA256
829cc462172b6b249882425e2af2ff385b7565d3ffcc0e078be3d6b9c117f388

SHA512
e9026108a9bd73d71dd9d76671349efda1e836afa08fddbf5d2139341fb9bf75485196e83c9904330eea52b9a21889988c2c014b0fedc217f08f75aeedce17e8

Download Submit
C:\Users\Admin\AppData\Local\ScratchJr\app-1.3.2\ScratchJr.exe

Filesize
54.2MB

MD5
8cbd68fafe41a1d18849c96ae6ec426b

SHA1
c8d3e3ed985f1ee41b8c67f1e0b491a000413ae2

SHA256
bbf6be58a044cecf55e46650944e029eb7b4a8c5a9f8b44cc2fe1bbd8433f0c9

SHA512
6a1c4391b1f782031cb30c0aa5c458ca9bc6f1db923b088227c0451f92f27022eee8f664563577da577c7e5da6fa61538289628c514941e908cc2037ac0f7b64

Download Submit
C:\Users\Admin\AppData\Local\ScratchJr\app-1.3.2\Squirrel.exe

Filesize
1.8MB

MD5
0e99b817da258b4f0fd31f0c8d4e82f3

SHA1
a050ad3bd500975361b436fe58a87c6ae8fa3267

SHA256
5cd78e57644d3965bbd4ac306146bea19427ace5cdc13fd3b1591589a3788cca

SHA512
8f6dc504c296390fb5d53ba293c864c14d3d69a174c8ae72c9e8d7d018bea5006b773c48ce1f4e2c2a2fd2b77103f101f6af72b2a72a503c2bd2d30a3b1c20e0

Download Submit
C:\Users\Admin\AppData\Local\ScratchJr\app-1.3.2\VCRUNTIME140.dll

Filesize
85KB

MD5
edf9d5c18111d82cf10ec99f6afa6b47

SHA1
d247f5b9d4d3061e3d421e0e623595aa40d9493c

SHA256
d89c7b863fc1ac3a179d45d5fe1b9fd35fb6fbd45171ca68d0d68ab1c1ad04fb

SHA512
bf017aa8275c5b6d064984a606c5d40852aa70047759468395fe520f7f68b5452befc3145efaa7c51f8ec3bf71d9e32dbd5633637f040d58ff9a4b6953bf1cbf

Download Submit
C:\Users\Admin\AppData\Local\ScratchJr\app-1.3.2\ffmpeg.dll

Filesize
1.9MB

MD5
86e535eccac1320113ad58219a74717b

SHA1
877f5af24141ca561e32541f1b2db968f9daeba7

SHA256
32b20afcf1e658a006a375e9dca9bd335e2186e3dfc49a49c999b4d038d0d81e

SHA512
dc06093b994f651b07fb0b1dcf4f048cdcfa844d9e47064e5b70514f36fecee3047e81c302f256ad6beeffc3d54e264023c87efd042070554bc9bd13bc70b680

Download Submit
C:\Users\Admin\AppData\Local\ScratchJr\app-1.3.2\ffmpeg.dll

Filesize
1.9MB

MD5
86e535eccac1320113ad58219a74717b

SHA1
877f5af24141ca561e32541f1b2db968f9daeba7

SHA256
32b20afcf1e658a006a375e9dca9bd335e2186e3dfc49a49c999b4d038d0d81e

SHA512
dc06093b994f651b07fb0b1dcf4f048cdcfa844d9e47064e5b70514f36fecee3047e81c302f256ad6beeffc3d54e264023c87efd042070554bc9bd13bc70b680

Download Submit
C:\Users\Admin\AppData\Local\ScratchJr\app-1.3.2\icudtl.dat

Filesize
9.7MB

MD5
bc7f54e4df91c9137dced27976228b66

SHA1
fe532df1de6dd6f9971227b48f8856e07ae0883d

SHA256
51b93e0bc7e6d697ccc29703e2ebc9210c231c931fe764c372e5ba0d26098d3b

SHA512
8fe03a5b65236c90af171f68e911ff307d40f249120ea1c2324e8a7ccf4061ce6ce6dfe66bc957e76bfa7e5161aaa005f40b9be95dc6481df46f25fbae41e14b

Download Submit
C:\Users\Admin\AppData\Local\ScratchJr\app-1.3.2\msvcp140.dll

Filesize
618KB

MD5
9ff712c25312821b8aec84c4f8782a34

SHA1
1a7a250d92a59c3af72a9573cffec2fcfa525f33

SHA256
517cd3aac2177a357cca6032f07ad7360ee8ca212a02dd6e1301bf6cfade2094

SHA512
5a65da337e64ea42bcc461b411ae622ce4dec1036638b1e5de4757b366875d7f13c1290f2ee345f358994f648c5941db35aa5d2313f547605508fd2bcc047e33

Download Submit
C:\Users\Admin\AppData\Local\ScratchJr\app-1.3.2\natives_blob.bin

Filesize
233KB

MD5
cf12cd78ea6ba08a203a8c8067e8b434

SHA1
cf6fcf5f84dfe4f79a59fe2859f224bda27558b4

SHA256
842a94a6b9db685e61b6224a44012a2862698e35861044612d91112a6adeedb8

SHA512
b271cc554fef7e51add17459ac289472887a30709e24023c8c28fbc5e48c4ea67e8988b8a57a4bc4bd3936186452e6728cb6e85cf20854d06d6323dc2f5c500f

Download Submit
C:\Users\Admin\AppData\Local\ScratchJr\app-1.3.2\node.dll

Filesize
17.9MB

MD5
5001af9be8678cc63ddbed63f74b86b6

SHA1
75c5ec8e2c582a97e6ada9bdefe13c2f4163f457

SHA256
2666e70a17fba354e596f07ef6d63a0fadcff49c8566a75850ff0881e8e033c8

SHA512
371757d30f97f611891b3ca0d80a712ebe7fc919d6a838bbc1a10a701d2c4284bc97380d94dc868a329128aaf6f75a3fb3ade083fa4e0eada9fca6c34334f521

Download Submit
C:\Users\Admin\AppData\Local\ScratchJr\app-1.3.2\node.dll

Filesize
17.9MB

MD5
5001af9be8678cc63ddbed63f74b86b6

SHA1
75c5ec8e2c582a97e6ada9bdefe13c2f4163f457

SHA256
2666e70a17fba354e596f07ef6d63a0fadcff49c8566a75850ff0881e8e033c8

SHA512
371757d30f97f611891b3ca0d80a712ebe7fc919d6a838bbc1a10a701d2c4284bc97380d94dc868a329128aaf6f75a3fb3ade083fa4e0eada9fca6c34334f521

Download Submit
C:\Users\Admin\AppData\Local\ScratchJr\app-1.3.2\resources\app\.cache\4e1a5069de66f1b2f52927c2388cdfb0756c1285\02702469ca4bda1e9a87d9250846797ffcbdb3e3.info

Filesize
44B

MD5
7d32db1fbf8fd9f9b5375bd183c73020

SHA1
d4376230bd2c74bbc084aab1976bf48a01ff6c12

SHA256
be8d4a8ae8abb920adbd45daa1bb769446f085457c8cfb3737a29cf152b7ead7

SHA512
b564441973c51d69ea0112343b83fa6f5443b88aabfec632d593bbbd605ce9347da68a03594576c8bd275a1a43b973de3c89c781dab2c1336dab04b897bf325c

Download Submit
C:\Users\Admin\AppData\Local\ScratchJr\app-1.3.2\resources\app\.cache\4e1a5069de66f1b2f52927c2388cdfb0756c1285\2edc39f99796fb1611998eeea9bb5c3d8f9ceb2a.info

Filesize
45B

MD5
10b75fe879c195c6610d1262b7156c2e

SHA1
7028a21a1e489ad6ab26fdb50f026da44f3d92a4

SHA256
9179fa654af9d6a1ec8be8026b92d0533fe38ed49dbb886f7a10c417e04d802f

SHA512
7df21574db924adacb9a772a822f73f50f2d238df0ecd814d93a0a767276d65aa0bd56bdae4d94b898afdbcbe0b8641fcb8bc97948d415735d2e9efef05af470

Download Submit
C:\Users\Admin\AppData\Local\ScratchJr\app-1.3.2\resources\app\node_modules\decamelize\license

Filesize
1KB

MD5
a12ebca0510a773644101a99a867d210

SHA1
0c94f137f6e0536db8cb2622a9dc84253b91b90c

SHA256
6fb9754611c20f6649f68805e8c990e83261f29316e29de9e6cedae607b8634c

SHA512
ae79e7a4209a451aef6b78f7b0b88170e7a22335126ac345522bf4eafe0818da5865aae1507c5dc0224ef854548c721df9a84371822f36d50cbcd97fa946eee9

Download Submit
C:\Users\Admin\AppData\Local\ScratchJr\app-1.3.2\resources\app\node_modules\pseudomap\LICENSE

Filesize
765B

MD5
82703a69f6d7411dde679954c2fd9dca

SHA1
bb408e929caeb1731945b2ba54bc337edb87cc66

SHA256
4ec3d4c66cd87f5c8d8ad911b10f99bf27cb00cdfcff82621956e379186b016b

SHA512
3fa748e59fb3af0c5293530844faa9606d9271836489d2c8013417779d10cc180187f5e670477f9ec77d341e0ef64eab7dcfb876c6390f027bc6f869a12d0f46

Download Submit
C:\Users\Admin\AppData\Local\ScratchJr\app-1.3.2\resources\app\node_modules\snapsvg\demos\tutorial\index.html

Filesize
9KB

MD5
71955c954f7c8c6eae50fb9223017fb4

SHA1
bfd5e075d90b48479d3fd3c209be75329ea9693f

SHA256
d5333ffba7d4df393c1d38dd76ac81ec86d0670b5d6f340fbc1c5070328c9979

SHA512
2f6d6400a37f7e9e58770730e90db85147c16d41f2dc6fa110d1bc2ef056ea436fb30912b1885187305b647962863657455357d41dfce1b8655cf0c0626f7652

Download Submit
C:\Users\Admin\AppData\Local\ScratchJr\app-1.3.2\resources\electron.asar

Filesize
233KB

MD5
68c57ee6dfa25b13d36e256dd095cf9d

SHA1
f3b75f243f33f9afbd790bf72d30d933afa6bda8

SHA256
3ae75bfb8d2abf29b83917b070a883d81aa5e4b6d30326c02337c66f088042c5

SHA512
a224e069ba13773072d4158d91c18e2c6caa576d52cfd31ad1eafc7e890f9b210b685a863d9d340087ca97653ed13eb11eb7419944214166fcff66acc09754d6

Download Submit
C:\Users\Admin\AppData\Local\ScratchJr\app-1.3.2\snapshot_blob.bin

Filesize
1.5MB

MD5
ddc11e5f4364b738fc523f1b37cc625e

SHA1
83665a1f0146d8274922e6dbc8caa19af6c6fea0

SHA256
acb67054aa063f8e4b80eaf3a2c43c7af1964ac4aed145632f2ff3e0be592103

SHA512
6c944ca2738c9616752ea8cb93e2fd66cb97e4cf0c24ff39253fb69ce607d7999784e1c8942603f3264685bd66be9fe4eec8305dd0bc1fe415142301d27e2049

Download Submit
C:\Users\Admin\AppData\Local\ScratchJr\app-1.3.2\squirrel.exe

Filesize
1.8MB

MD5
0e99b817da258b4f0fd31f0c8d4e82f3

SHA1
a050ad3bd500975361b436fe58a87c6ae8fa3267

SHA256
5cd78e57644d3965bbd4ac306146bea19427ace5cdc13fd3b1591589a3788cca

SHA512
8f6dc504c296390fb5d53ba293c864c14d3d69a174c8ae72c9e8d7d018bea5006b773c48ce1f4e2c2a2fd2b77103f101f6af72b2a72a503c2bd2d30a3b1c20e0

Download Submit
C:\Users\Admin\AppData\Local\ScratchJr\app-1.3.2\squirrel.exe

Filesize
1.8MB

MD5
0e99b817da258b4f0fd31f0c8d4e82f3

SHA1
a050ad3bd500975361b436fe58a87c6ae8fa3267

SHA256
5cd78e57644d3965bbd4ac306146bea19427ace5cdc13fd3b1591589a3788cca

SHA512
8f6dc504c296390fb5d53ba293c864c14d3d69a174c8ae72c9e8d7d018bea5006b773c48ce1f4e2c2a2fd2b77103f101f6af72b2a72a503c2bd2d30a3b1c20e0

Download Submit
C:\Users\Admin\AppData\Local\ScratchJr\app-1.3.2\vcruntime140.dll

Filesize
85KB

MD5
edf9d5c18111d82cf10ec99f6afa6b47

SHA1
d247f5b9d4d3061e3d421e0e623595aa40d9493c

SHA256
d89c7b863fc1ac3a179d45d5fe1b9fd35fb6fbd45171ca68d0d68ab1c1ad04fb

SHA512
bf017aa8275c5b6d064984a606c5d40852aa70047759468395fe520f7f68b5452befc3145efaa7c51f8ec3bf71d9e32dbd5633637f040d58ff9a4b6953bf1cbf

Download Submit
C:\Users\Admin\AppData\Local\ScratchJr\app-1.3.2\vcruntime140.dll

Filesize
85KB

MD5
edf9d5c18111d82cf10ec99f6afa6b47

SHA1
d247f5b9d4d3061e3d421e0e623595aa40d9493c

SHA256
d89c7b863fc1ac3a179d45d5fe1b9fd35fb6fbd45171ca68d0d68ab1c1ad04fb

SHA512
bf017aa8275c5b6d064984a606c5d40852aa70047759468395fe520f7f68b5452befc3145efaa7c51f8ec3bf71d9e32dbd5633637f040d58ff9a4b6953bf1cbf

Download Submit
C:\Users\Admin\AppData\Local\ScratchJr\app-1.3.2\vcruntime140.dll

Filesize
85KB

MD5
edf9d5c18111d82cf10ec99f6afa6b47

SHA1
d247f5b9d4d3061e3d421e0e623595aa40d9493c

SHA256
d89c7b863fc1ac3a179d45d5fe1b9fd35fb6fbd45171ca68d0d68ab1c1ad04fb

SHA512
bf017aa8275c5b6d064984a606c5d40852aa70047759468395fe520f7f68b5452befc3145efaa7c51f8ec3bf71d9e32dbd5633637f040d58ff9a4b6953bf1cbf

Download Submit
C:\Users\Admin\AppData\Local\ScratchJr\app-1.3.2\vcruntime140.dll

Filesize
85KB

MD5
edf9d5c18111d82cf10ec99f6afa6b47

SHA1
d247f5b9d4d3061e3d421e0e623595aa40d9493c

SHA256
d89c7b863fc1ac3a179d45d5fe1b9fd35fb6fbd45171ca68d0d68ab1c1ad04fb

SHA512
bf017aa8275c5b6d064984a606c5d40852aa70047759468395fe520f7f68b5452befc3145efaa7c51f8ec3bf71d9e32dbd5633637f040d58ff9a4b6953bf1cbf

Download Submit
C:\Users\Admin\AppData\Local\ScratchJr\packages\ScratchJr-1.3.2-full.nupkg

Filesize
70.5MB

MD5
f6214c36af1a1a80d88fca40bffaeeef

SHA1
17d5382e18ebc8161bc32d7312a41dbde53f560e

SHA256
4d9bdb4062324430784de6533b47d439f0f9e95239a1d1c0c4fc9ad48932c6ac

SHA512
8dff8f8d1486ba7789b097130fc80fb5b1b607102aaf8a20aa8c1656df9504b5f346e423895113ba8b92b6941cc03de23bb0c07fb52c2fa466735b3bf887decf

Download Submit
C:\Users\Admin\AppData\Local\SquirrelTemp\RELEASES

Filesize
80B

MD5
8fd1eea8ebabbf01a8514ab7e066a550

SHA1
e29ebc5842b67e1631f250775e88b8db8b95ae9e

SHA256
099e8b43f342f9421465748c70e5cd219d74c31d24a648147600091b57d82d43

SHA512
e338577e5f1309db6f79a52291c3c3fb7cf93a5186256e6ee670b89d79ee4a816125c125149b334180367d2953b48a887faea02b4d4ddcd77516fd0cd1eae144

Download Submit
C:\Users\Admin\AppData\Local\SquirrelTemp\ScratchJr-1.3.2-full.nupkg

Filesize
120.1MB

MD5
660ba1131a27ac0b3699d14f1cd654ee

SHA1
158e7aae379bef932f4da5edf52a21dbad714e5d

SHA256
f6c6258af6111ed18b4284ac72b8b26502e845b281e56877ffe79927d0b50dc1

SHA512
9cb8a68d714d17f723a4ed931c8e9617b3b619f925e41400f523a0bd7a40213e092c1339e7f4c6a2a97166365f4ec7134a872012cdf3220ce177cd000475b176

Download Submit
C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe

Filesize
1.7MB

MD5
095254c23cb3172b9254a8b7538f7f8b

SHA1
a9e35f3a81e92911e260ec9694232d7edbcf0ce4

SHA256
1dacaeafc733021fdd9be7929af609950eade2de72e0b7de48002c48e0c41470

SHA512
67830e3b8dd2bda3dd38ac6c7d15bb9b2f65c0bcc26ed5efd97e0fddfa88c096f49fb5b67bfca752a60e18278cf86e09bc9958f3c70b2cfb2f61c92f4e87e6e6

Download Submit
C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe

Filesize
1.7MB

MD5
095254c23cb3172b9254a8b7538f7f8b

SHA1
a9e35f3a81e92911e260ec9694232d7edbcf0ce4

SHA256
1dacaeafc733021fdd9be7929af609950eade2de72e0b7de48002c48e0c41470

SHA512
67830e3b8dd2bda3dd38ac6c7d15bb9b2f65c0bcc26ed5efd97e0fddfa88c096f49fb5b67bfca752a60e18278cf86e09bc9958f3c70b2cfb2f61c92f4e87e6e6

Download Submit
C:\Users\Admin\AppData\Local\SquirrelTemp\background.gif

Filesize
231KB

MD5
85371aa046d1ae646b18d16198a220b9

SHA1
6cec0afd1f7189c2b3d40a10184bacad7a390b8b

SHA256
d90389539d406e3b318596ffa4faa70f3d14e07b12a730926363b14dc4f85d54

SHA512
0fb36b05b6397cb5ca9f6b008fe87deabf678e4ffd70d9306d26157611007385b4c1cab59f4adc4187d81145117f60512d02fbe127502ebf537e4d3dd88bebc7

Download Submit
memory/1924-142-0x00000000055F0000-0x0000000005600000-memory.dmp

Filesize
64KB

Download
memory/1924-887-0x000000000A7C0000-0x000000000A7F8000-memory.dmp

Filesize
224KB

Download
memory/1924-145-0x0000000005F80000-0x0000000006082000-memory.dmp

Filesize
1.0MB

Download
memory/1924-1628-0x00000000055F0000-0x0000000005600000-memory.dmp

Filesize
64KB

Download
memory/1924-1359-0x0000000074260000-0x0000000074A10000-memory.dmp

Filesize
7.7MB

Download
memory/1924-140-0x0000000000A40000-0x0000000000C04000-memory.dmp

Filesize
1.8MB

Download
memory/1924-141-0x0000000074260000-0x0000000074A10000-memory.dmp

Filesize
7.7MB

Download
memory/1924-990-0x000000000A780000-0x000000000A78E000-memory.dmp

Filesize
56KB

Download
memory/3568-9058-0x0000000074260000-0x0000000074A10000-memory.dmp

Filesize
7.7MB

Download
memory/3568-9059-0x0000000004AB0000-0x0000000004AC0000-memory.dmp

Filesize
64KB

Download
memory/3568-9057-0x0000000000030000-0x000000000020E000-memory.dmp

Filesize
1.9MB

Download
memory/4712-9070-0x00007FF6DC030000-0x00007FF6E0EF7000-memory.dmp

Filesize
78.8MB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads