6c974aa57734ff98a88b403058ebbc281a7deb311886c4e1697e59a192afc542

Analysis

max time kernel
141s
max time network
164s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
07/10/2023, 02:00

Target

SKlauncher-3.1.2.5.exe
Size

1.6MB
MD5

a3eaae6bb7e01e8059f1276ccb7f6c62
SHA1

801b7bb06be83f057fcf7d84c119e0ccb6310386
SHA256

6c974aa57734ff98a88b403058ebbc281a7deb311886c4e1697e59a192afc542
SHA512

57a21164ca396e36c55d39e553647567399fb9e10b7f08d93c691df714aea1b1959b8c230761445b8e39ce81eb8c65a4d34b968d73f7e649e903d5245320d5f8
SSDEEP

49152:HIBc3nWdsIp8gClzw4Kz/q4BkkKlWThSorx:oB/Eq44TBTKEUor

Score

1^/10

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 4924 wrote to memory of 4968	4924	SKlauncher-3.1.2.5.exe	85
PID 4924 wrote to memory of 4968	4924	SKlauncher-3.1.2.5.exe	85
PID 4924 wrote to memory of 4004	4924	SKlauncher-3.1.2.5.exe	87
PID 4924 wrote to memory of 4004	4924	SKlauncher-3.1.2.5.exe	87

C:\Users\Admin\AppData\Local\Temp\SKlauncher-3.1.2.5.exe
"C:\Users\Admin\AppData\Local\Temp\SKlauncher-3.1.2.5.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4924
- \??\c:\PROGRA~1\java\JRE18~1.0_6\bin\java.exe
  "c:\PROGRA~1\java\JRE18~1.0_6\bin\java.exe" -version
  2⤵
  PID:4968
- \??\c:\PROGRA~1\java\JDK18~1.0_6\jre\bin\java.exe
  "c:\PROGRA~1\java\JDK18~1.0_6\jre\bin\java.exe" -version
  2⤵
  PID:4004

memory/4004-18-0x0000000002A80000-0x0000000003A80000-memory.dmp

Filesize
16.0MB

Download
memory/4004-28-0x0000000000B80000-0x0000000000B81000-memory.dmp

Filesize
4KB

Download
memory/4968-7-0x0000000002B80000-0x0000000003B80000-memory.dmp

Filesize
16.0MB

Download
memory/4968-15-0x0000000002900000-0x0000000002901000-memory.dmp

Filesize
4KB

Download
memory/4968-32-0x0000000002B80000-0x0000000003B80000-memory.dmp

Filesize
16.0MB

Download