Analysis

  • max time kernel
    146s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    12/10/2023, 22:49

General

  • Target

    SKlauncher-3.1.exe

  • Size

    1.1MB

  • MD5

    021b53abfc25a261077282498e5726a0

  • SHA1

    ba7f38a28444504e6e8e1f995cc40ceb70ff6409

  • SHA256

    c3db9475c3ab6b53d8f6d711f587e5218c9b8d332229a208277bc0b27a24b620

  • SHA512

    484bb65ecb1ccd3e5472a27737fd2fa4471240aeefcf4bfdeaf4e49636cec9b3e43a5c2feb7134074c92af01f52a456b8074aca8269480e210cfa3b51acae81d

  • SSDEEP

    24576:7h1tjL2uma7hLQKaikK21SHCJ3ny+SGiPsGSa7tLC+/e0cUEcnr:sghMKai1viny6iPH5hF/e0m2r

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 11 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SKlauncher-3.1.exe
    "C:\Users\Admin\AppData\Local\Temp\SKlauncher-3.1.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2160
    • C:\Program Files\Internet Explorer\iexplore.exe
      "C:\Program Files\Internet Explorer\iexplore.exe" https://adoptium.net/
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:2952
      • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
        "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2952 CREDAT:275457 /prefetch:2
        3⤵
        • Modifies Internet Explorer settings
        • Suspicious use of SetWindowsHookEx
        PID:1440

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    db69e5fa0af0c7ad2d6a934c929cf27f

    SHA1

    1d9501e8fd8f172917e32c22458dd94f2dddf67f

    SHA256

    27185049c898d0907d3861619eb2b8162805650304084d703a8fdfaddb8fac1e

    SHA512

    5c7e2dfd00bdb4174aec1f2cc29bf42a327a249a195d06a24204dd8b245321e1dfccb729af79a3de5151fae7260b9f7dc61d3b9d85b1a8a5960d3fb6b0a63d5d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    279d0272efb46f58373cdf380ec6983e

    SHA1

    6716bb26c86522b34da972418f6ed21fd2d6da85

    SHA256

    b9995cbae0c0bec861fa465a1df56d5bb4abdd8540fefb80a028534234d2a163

    SHA512

    af17274ccf8d6b860432708bce6729f9d60e49f39b3054acb8e4b722dea6f5d3b630fc50d3f620730a0acedb360aa34eb87a2051eeee0d51fe4e7aee5637b72d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    3afe76a73fc627c25dcfdf93e1a9f209

    SHA1

    971560c25d695cb356843f75208bfd754099e783

    SHA256

    9aab20d9c2df340c680561d0b0b9b7fbf2b045c2e68278ca1136cb48ab79df01

    SHA512

    d27b44b12c25d52fc4ef234ba199c5dd175ebfa36f89c71773c2021215bb2aeabafaf160e1cdc15c0f8064ff8d205fded43996f6c802215a13fbbe894a13be9c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    3b667d04d58d377362f452fc6629cc61

    SHA1

    8d8b77107a96fd8483197c5ed6057d0b864ee2fd

    SHA256

    f3f8fb934e55b7d63a9e083ba699ac15d23745de5d523f4a3cf8827e4d46b2b7

    SHA512

    404ea24bee4a0a5d4cdad023cd4e6af79fe0f3ef0aec73726200c0d128d540fa3741b61c39fd13f7bbb619cc9ed0af7fb50f30b842835e29ba25eed2a8306d84

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    171d9f5c09ed8a61c561adca06f976c6

    SHA1

    ec1401c90df098e81a8df0329b9b3ffa27adc293

    SHA256

    fdb7b93e7a222978bfe01de73587f39212bfc5515e2b2c681630bd10b824a932

    SHA512

    de7addbd7322085774aa1015459a50b67b66830f9e6fb707ecad91f223309fa3d4080e6a97307c1699c63f3e612ca5a4d02d4d96c445d82aa28a072468318a82

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    29817d92b9ebb9b7a7df044622f73987

    SHA1

    ad383f244b2b5c4154a0b88fc29fe78682e3e951

    SHA256

    fdfe4067b7acf490d519e33da5762a994a245324fd5ef8de0e88c5f843ac9400

    SHA512

    02a31e30b429a157e031106820c1a6af89b4a7b4d9e39377e809506e7691dc1546f8a6821412cb7193f4aec52a6593db1c6d82ef4a62448eb1a45c20ba0a7c77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    7cd6893fff02f558f2aae2dccfdb27d6

    SHA1

    b089bcc2f117c78576c0d850e90c9b3e80952f51

    SHA256

    a53ae373afc2e22ad09c3a66716541fba4d19754871b2cdb4a5825c78fcadad0

    SHA512

    eb106dc61e2d3b67a1cc5913f778dc68c9e34e55973af14641f24345ad128462ff18c2339b7533e588a1014f4e36ac3ab51c880c14baa3cd8bf1aeb8b96ae225

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    b66d74c1754972d8b5c714110570a00e

    SHA1

    e8e9eb6eb500da49caa83d455d5cd4622c1fbf8b

    SHA256

    2eefc3363559aeb8b585277062425e912bf7a17c74dad2bf3241600752c463eb

    SHA512

    2f9f88ac3e3115e782fda3bc4a8b0ea2f845af4cb71afa82eed19bca46868c3bad5707370b5c68fe168ed9e3aed11078a2094f81c7cec7702d80c2b69ac325c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    1b8e620ffa8a8d127b9768c597f0a343

    SHA1

    1748e690522b1dd0175e57f7cde3a8fcbad2e8e5

    SHA256

    bfed39a54f6e0755b0f68e462b38be766c592435bd4f3a29a980f17c5f5f8aee

    SHA512

    df87c5b93850efa8b6e0864900ae47d67c7da5a98ab8b39223ba34d1be1af92bd4fc4a78d0989aca2afc15c3fef7f4a9edcf511d72dff1b9b9bc2ccc7e16e94f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    dbfb51145c32e64191c9643dd0029936

    SHA1

    b495e2178b4cbd87a3e3a690b7a839625605f4d0

    SHA256

    0f7c84d243e8a08830abaab9f24e66dd20388316428b5d35606108334cb28d8f

    SHA512

    a543391ff534a1809d9fc300223fb9843d11c10ec0fbc247f80e066ec46ba4825dbdad51524c1301984f2ca0eb62eeee36d6847f4cd6dc704c6679ef67f15e00

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    3ca033f721b1aadcd37948e457ca2653

    SHA1

    4540cb3cab53b7c559e4116ac7c6f6279f750e8f

    SHA256

    35b6dd5434f17994e2fabfcc00e086ceecb6a1e5a4879831940e0db0e73b809c

    SHA512

    fb0f79b25fd60283af75652bc4cff4781187261ae84e45b459ec7f9063e2e89384d9486ac55747020ce04d54564e84cb75a2b93f145199198fba974749b13bce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    0103e1e3bdefa893502771822c15d17b

    SHA1

    27f17ca9126722e78484fe05529d9224b935586d

    SHA256

    ee0311360ab5d5b810b0f4df58e37496b3b5566d5a1914af73c650c848aa35f5

    SHA512

    a8fba58c5c60596bf722cf0c65778c6e907e88884d604a3cee9357738179068627504c8e3c59eccf223de9fd79aeb28bb19cd78cfcef5e05bfb9c7d3498e7c57

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    c0abd8706b8e95400291ea573cc975fe

    SHA1

    c1cb0f5cf5ac0957acc2b169b73e73a90098ba70

    SHA256

    f02dd852bfbf0160228315968380a0ccef4041e1e7c4a2d22a9286e0cb9681b7

    SHA512

    30ef466b6b2e62bb57c307aa53f7bc4712adfcad2455d444060a7817e9736630233d7fc5aa0a348de00ef123b2ef33ee57d51082dc38b335cabeec328b04182c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    cb85527d8a385e5849b055ed78e48770

    SHA1

    e1b578d027b8b6ebe0dca6ef220310cf12ac1cb4

    SHA256

    bc06488435070d70285f24233173c4c9cb8e2e0fbcb36416001e71f2ef00b473

    SHA512

    f1c59bff4d2f638899246efc305e84ea36e1f33e11a199a1a9be576733881931df64c8b9dada8112a04429bfa7bf475299e6f3ab0ef83b8d5cb606f34c4f45c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    57a076fcb679083ef309ff30b65ee9d3

    SHA1

    0e7c3e1f5d0a152168d516e827727fe13545c6e6

    SHA256

    4a3b4ec4a9971b030855733c0d37572db7ca3e7748cac40eeb60f870b64c9d0c

    SHA512

    4c6ff529c8277fac0df3a6cdded65a31c0920f000e2fa239dc06e85a8ec4ad47a18a2c5b9a62bef86037f5c6a6baaf1c27a66aee11caf371849e48262d9a18f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    eb748f5fe71483210ef28ade6a6e73dd

    SHA1

    c09442bf6e44482fdd2acaf7e39d98be61691f1c

    SHA256

    8b896918b56b73eeaedf6620916206e9e577dc360c021f226b0162e418d2c2f8

    SHA512

    178708ea71e8b8c69c7c0278189c3204b222943843778d14a3193524d35de7558f05494c43fac7021ec2f8e8d177e27b93b16a3af2b24e8ca0a665e49c7fcb15

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    5217c5210c73c1e96049a2000ebd431b

    SHA1

    32ad3472e2d8ffd81f7f672ecd1b31138d072800

    SHA256

    6dfcfce0d2824988204cd33b7a7a22aa34e5233988e3191efab854b1b14833af

    SHA512

    d81a4fac33d2a3bbe9d8f646445295da5eb4c46e4ce360f0f07e9ee216f911fb3234895203859b6a99b1661bf2eeb0c7d2a83c6c52a74d89a6f8f9167ff7b1d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    bb8c7f1dfe598fe7401ea97441b3bc97

    SHA1

    6ad9dfc56517d9063847cc34dfe2363b327a63bd

    SHA256

    57e20df5b090a29b44885ebeabc1353f174d4be58609c1dc2b6fb68cd61fa8b1

    SHA512

    456a5e1b3ac8ba7cec77ea515036ecc023f849308c367fb1b827bf334bbc0af6e133f73cb3d9b5ea21cc6efe77c25fd525990704f472ad46d7725013065386f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    13fbd4ecd8ba3a19c5d4f5cdfe065a84

    SHA1

    dbbed450cd9681ab82e6e17130c626bab9b92652

    SHA256

    bedf10fd24a427d8c79706df511f333b4ce0c0cefdfb99b2b4a68caf46b1dc79

    SHA512

    11890d6ea05206bd02821b3ed30e21bb2c44a9bc73107af9abc0c22a5e2fb95c7ccb131f2bcf12a78dcd09dd767ddcea23046f0d6ba39567471bbdc66ee75a4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    61576a4239cda820b5f4a85f0dfe1631

    SHA1

    efa88913ef589d33c325e41fe75678ac3fdfa0fe

    SHA256

    c14d31146f076d0cdf5a5151bc5da18c2807ef667f87d0407acfa73d9ece91fd

    SHA512

    adb653257ce3d55124263ff4f32e7beee119a8adef6744ddd227d9c30a13ab8d366474dacfe13580608066bea6cd4afcfd04b678b632a3cbe9b50ad1d0a6e38a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    9ad4e7013ea5342beff649dfd7754d95

    SHA1

    632ccf636efabb3a4e75dfcc6c6945afabf802d8

    SHA256

    2e67704dbcd09073f31ebd618c300593be2cea05a2cd82eab0c1a11ee1464572

    SHA512

    5a158dea8c17280008202cf80b9cbb96a69dcee3ace5a2d786346d4b636c3399152cbaedaf037ffbcb062edf604d62d3dbdd343a6947417150657e120c5b0163

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    668d6a3d04278a2dea184b1e045d1ddc

    SHA1

    9bb21306f9a7cc9c08dde1925b15449c7579870c

    SHA256

    e1d5c13a4c2dc9668f10161d3360c6a51f801bddbf50247198c42fb65a1a1418

    SHA512

    fb8e4a7292c35e2a6f2b67e3f53620c5112b6e1fe72f49b9cc7866b92464e0eeb7bcdd4b1142cfdbc51718fb1e22afaf9f7bc22ac0f25d544ddf71d48fd7d066

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    24436935579e2e1f2833838db89e2830

    SHA1

    c2f876a7e144b52667ab62e584ee758c4f1137ed

    SHA256

    eadc751f9a756063ee40c25940e5295350eaeb47bda8842026652e73c0b963cf

    SHA512

    a7b0a5c4afe8afb6b9bd29726f7ab9623a01ab4ed5c68b95f52f8cd473a4bbd9ac70fb51de3d54cbcc8b925261f438a7a1bb4b517628afcc4fcc4dbd9df2616b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    24af21710eac1c93baabd3e9bd0339e1

    SHA1

    e07a3d843a39767b5e7d3a97e7c9ee8ee25cd062

    SHA256

    0e1ce6409624f55ab15eaf5620d3cbe7140c2bea732e3ebdd01f029a0e80f138

    SHA512

    f7dcced17cdbf7b748502b3fdc07556f5640a777536efbd7e87e6370406148031ad458acd12261103ce6b7a372dbf43c7b8388e21f177f6488c61c8b250c72f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    fdbb17a61ed59832959cf04b4268edaf

    SHA1

    73cf8ed5f5cd710d2ccdae484dc8f6441e16dd81

    SHA256

    870a890232a6039aec27ed8395c00e21e8ff3f895aff293cc8bf48ca512a8c9e

    SHA512

    f39e1fc50d61f8ae1949e592b9624412b9a21994e4d21d850a9a9be79770aec727b63460de5f340ac9001d2d90c1520c7c0f7e4c9e8c04aee3b852dcf021d283

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    52e7705c0f0105eade090a27e276ec5a

    SHA1

    0a047e37e8bc069300a89e7e5cda540ead2663d6

    SHA256

    44cd25441f40df7cd8a259686fca002ffdf3d5fc6b1df1d448c09de723779945

    SHA512

    ca95b2bd2e47ccad418735fe8082751c1898c35b04ea5aa5c6cef5913e3e63911c776ccb096dc47400977fb60dac573084b9602ff354df74540f3946601cfa8f

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\q81kvxe\imagestore.dat

    Filesize

    2KB

    MD5

    bd262f1dfe10bd613735b4678988923d

    SHA1

    a38368df73cf9e244ba0718fbb71639846844307

    SHA256

    0757239205661359dbb863992e4ea1303d962de8cfd85a9701c4480901aa5442

    SHA512

    0bb94b8a8ba4bc31842bb3fd3e106396a9b738e038474b8d817cb8280d562735808a3092cb8f97b2afdc0da5dc65c09ebded88da8542ec163ee3a839a50f88bc

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VCB5UVUE\favicon-32x32[1].png

    Filesize

    2KB

    MD5

    df4253088bb850c76f81c91db284d4f7

    SHA1

    46e3e3c42a159f22038d86bf39fbde118c91dcbf

    SHA256

    590d33ce64b321c321644bc8c840c354257371f8c247f776b788a5ce2c9bbc72

    SHA512

    7804f8507d35adc2a3f65a4fb017bc50219fd2ee326693dfc5011cc9e22df61f50533ee7eb597133ac69e502683b7089df89735f03e11807a4724564061b0b22

  • C:\Users\Admin\AppData\Local\Temp\CabBFE7.tmp

    Filesize

    61KB

    MD5

    f3441b8572aae8801c04f3060b550443

    SHA1

    4ef0a35436125d6821831ef36c28ffaf196cda15

    SHA256

    6720349e7d82ee0a8e73920d3c2b7cb2912d9fcf2edb6fd98f2f12820158b0bf

    SHA512

    5ba01ba421b50030e380ae6bbcd2f681f2a91947fe7fedb3c8e6b5f24dce9517abf57b1cf26cc6078d4bb53bde6fcfb2561591337c841f8f2cb121a3d71661b9

  • C:\Users\Admin\AppData\Local\Temp\TarC067.tmp

    Filesize

    163KB

    MD5

    9441737383d21192400eca82fda910ec

    SHA1

    725e0d606a4fc9ba44aa8ffde65bed15e65367e4

    SHA256

    bc3a6e84e41faeb57e7c21aa3b60c2a64777107009727c5b7c0ed8fe658909e5

    SHA512

    7608dd653a66cd364392a78d4711b48d1707768d36996e4d38871c6843b5714e1d7da4b4cc6db969e6000cfa182bcb74216ef6823d1063f036fc5c3413fb8dcf

  • memory/2160-0-0x0000000000400000-0x000000000041C000-memory.dmp

    Filesize

    112KB