Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    35s
  • max time network
    45s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08/08/2023, 03:18

General

  • Target

    meteor-client-0.5.4-1874.jar

  • Size

    4.7MB

  • MD5

    6f1610296edb05c4e7fd02cbc706b34d

  • SHA1

    bd5ebd896df878ec901d7eed64e87cc60b2f3ea9

  • SHA256

    4bc92b9bdaa9a4d4bbf5bfccaf463b1b125a3588ff999039a8813da76fb01102

  • SHA512

    f8149007fa762f91765815605e4cb07ff3b0140e9935c9e77a2488f304bf3e5d2ec988051d27cb3b700ff18c0117215da1e73aedf7583b4e547cf1c730f7369b

  • SSDEEP

    98304:iE2SKr+13mN6/FJwnUlexOFZjKYMLrp3wCiCur28/+qPLzF:iE2U//FWUlexOFNSp3whS8VPHF

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\ProgramData\Oracle\Java\javapath\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\meteor-client-0.5.4-1874.jar
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3616

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3616-135-0x0000000003260000-0x0000000004260000-memory.dmp

    Filesize

    16.0MB

  • memory/3616-144-0x0000000001680000-0x0000000001681000-memory.dmp

    Filesize

    4KB

  • memory/3616-148-0x0000000001680000-0x0000000001681000-memory.dmp

    Filesize

    4KB

  • memory/3616-153-0x0000000001680000-0x0000000001681000-memory.dmp

    Filesize

    4KB

  • memory/3616-157-0x0000000003260000-0x0000000004260000-memory.dmp

    Filesize

    16.0MB

  • memory/3616-161-0x0000000003260000-0x0000000004260000-memory.dmp

    Filesize

    16.0MB

  • memory/3616-166-0x0000000003260000-0x0000000004260000-memory.dmp

    Filesize

    16.0MB