987027f9aa89e7285a553ee9ad3f08d0e3c202a860011416bf1c669bd750225d

Analysis

max time kernel
140s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
15/10/2023, 22:34

Target

forge-1.20.1-47.2.1-installer.jar
Size

5.6MB
MD5

f69e400691a0ba0a60f9f679fd6d6653
SHA1

3c924b4f5c29d9c829ce92cdcea155a9f35fcce3
SHA256

987027f9aa89e7285a553ee9ad3f08d0e3c202a860011416bf1c669bd750225d
SHA512

59c896862716ea5b4c04479b95585e694b188bca945fd33664c0ad16668d09720abcf93358f3344c6872fbcda0f487cdfa479ee1fe6d448af57e4e976f77f092
SSDEEP

98304:Qqh4CNcuGIXGMPoGxbz/p6x9fieG+YO39p0gY3HMS0udPiKF1ae8JDXnn/gwjV4i:QaLNR3GMAGxbzh6biePDtp0gYXj0udPG

Score

4^/10

Drops file in Program Files directory 12 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\server\dll\ntdll.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\server\symbols\dll\ntdll.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\ntdll.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\symbols\dll\ntdll.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\jvm.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\dll\jvm.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\server\ntdll.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\symbols\dll\jvm.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\dll\ntdll.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\server\jvm.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\server\dll\jvm.pdb	java.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\bin\server\symbols\dll\jvm.pdb	java.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3856	java.exe

memory/3856-4-0x0000000002780000-0x0000000003780000-memory.dmp

Filesize
16.0MB

Download
memory/3856-11-0x00000000024E0000-0x00000000024E1000-memory.dmp

Filesize
4KB

Download
memory/3856-17-0x0000000002780000-0x0000000003780000-memory.dmp

Filesize
16.0MB

Download
memory/3856-20-0x0000000002780000-0x0000000003780000-memory.dmp

Filesize
16.0MB

Download
memory/3856-25-0x00000000024E0000-0x00000000024E1000-memory.dmp

Filesize
4KB

Download
memory/3856-27-0x0000000002780000-0x0000000003780000-memory.dmp

Filesize
16.0MB

Download
memory/3856-29-0x00000000024E0000-0x00000000024E1000-memory.dmp

Filesize
4KB

Download
memory/3856-31-0x0000000002780000-0x0000000003780000-memory.dmp

Filesize
16.0MB

Download