Analysis
-
max time kernel
155s -
max time network
164s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
-
submitted
23/10/2023, 19:41
General
-
Target
forge-1.20.1-47.2.0-installer.jar
-
Size
5.6MB
-
MD5
370c3ad5798813a853ab9a061dceaeb8
-
SHA1
c54ae08eab3691b85ff129fda3445070292e5d69
-
SHA256
f6caf8ba19294236708171df84a45d7be314a2916de3ecde6826880cf2adc19b
-
SHA512
ae0d250e45a1899c0c3a28dd97f1cc7416bc185b5b2d7befdc462f4e5ec681e14dfa2f0fb1d1e93d5e6b88f064d0116e680a272d22157cdf4e58d97ec9572780
-
SSDEEP
98304:+h4CNcuGIXGMPoGxbz/p6x9fies+YO39p0gY3HMS0udPiKF1ae8JDXnn/gwjVYbR:+LNR3GMAGxbzh6bietDtp0gYXj0udPie
Malware Config
Signatures
-
Modifies file permissions 1 TTPs 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
-
Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -jar C:\Users\Admin\AppData\Local\Temp\forge-1.20.1-47.2.0-installer.jar1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\icacls.exeC:\Windows\system32\icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant "everyone":(OI)(CI)M2⤵
- Modifies file permissions
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
46B
MD55cb7a5a361e1379aab9b89272e81e034
SHA1313b7568755cd9cf222a18c70d48bcbf7d5fe617
SHA256cfa67f181827b8f82e340574c7ed9e8a26b2a847c0642b990891d071624e49a4
SHA512806083b8722cace618dd9a64cc93cbbabc8788a0634f9706934ed1f36fd4db73f9ca479883279a31e2a955fd392a5eb4f7666385b867f9537ecdbc06becbbcc5
-
Filesize
16.0MB
-
Filesize
16.0MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
16.0MB
-
Filesize
16.0MB
-
Filesize
16.0MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
16.0MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
16.0MB
-
Filesize
4KB
-
Filesize
16.0MB
-
Filesize
4KB
-
Filesize
16.0MB
-
Filesize
16.0MB
-
Filesize
4KB
-
Filesize
16.0MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
16.0MB
-
Filesize
16.0MB