82d71e9f70e93c6e90e68e69878299e31daa535258addd0dd94572252a260e33

Analysis

max time kernel
147s
max time network
41s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
24/12/2023, 03:17

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Setup.exe
Size

98KB
MD5

382e32f39b1ab097ff51cd04a54af166
SHA1

d4794322457464b31d5d45533d232faaddce91d8
SHA256

9755f3bfbde367b75c7f8a454fd8f1a862583c75cbe46dd193d51a487ef75390
SHA512

5ab8ec92db81d2d1dc79b2ed0f22cf169ef9c848c59bc7ec681fc670a6d644b0fb59afe89ed15f087081d11dd8d316c556f6e19cb826a7635b1b8b7fa4bcd66b
SSDEEP

384:voI1gYZw33FUWUcC6TBhdsDgZH4o5NEvdlcn0ScPmPn0Avsl9EPg/s4Xsn+KvHKY:37Zw33FNUf6Nhd/fQ1l+0vM0iT9H26E

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2888 wrote to memory of 2864	2888	Setup.exe	30
PID 2888 wrote to memory of 2864	2888	Setup.exe	30
PID 2888 wrote to memory of 2864	2888	Setup.exe	30
PID 2888 wrote to memory of 2864	2888	Setup.exe	30
PID 2888 wrote to memory of 2864	2888	Setup.exe	30
PID 2888 wrote to memory of 2864	2888	Setup.exe	30
PID 2888 wrote to memory of 2864	2888	Setup.exe	30

C:\Users\Admin\AppData\Local\Temp\Setup.exe
"C:\Users\Admin\AppData\Local\Temp\Setup.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2888
- C:\Users\Admin\AppData\Local\Temp\jre\bin\javaw.exe
  "C:\Users\Admin\AppData\Local\Temp\jre\bin\javaw.exe" -Dfile.encoding=UTF-8 -classpath "lib\.;lib\..;lib\activation.jar;lib\antlr4-runtime.jar;lib\asm-all.jar;lib\commons-email.jar;lib\connector-api.jar;lib\dn-compiled-module.jar;lib\dn-php-sdk.jar;lib\dyn4j.jar;lib\gson.jar;lib\HikariCP-java6.jar;lib\javassist-GA.jar;lib\jaybird-jdk18.jar;lib\jfoenix.jar;lib\jkeymaster.jar;lib\jna.jar;lib\jphp-app-framework.jar;lib\jphp-core.jar;lib\jphp-desktop-ext.jar;lib\jphp-desktop-hotkey-ext.jar;lib\jphp-game-ext.jar;lib\jphp-gui-ext.jar;lib\jphp-gui-jfoenix-ext.jar;lib\jphp-json-ext.jar;lib\jphp-jsoup-ext.jar;lib\jphp-mail-ext.jar;lib\jphp-runtime.jar;lib\jphp-sql-ext.jar;lib\jphp-systemtray-ext.jar;lib\jphp-xml-ext.jar;lib\jphp-zend-ext.jar;lib\jphp-zip-ext.jar;lib\jsoup.jar;lib\mail.jar;lib\mysql-connector-java.jar;lib\postgresql.jre7.jar;lib\slf4j-api.jar;lib\slf4j-simple.jar;lib\sqlite-jdbc.jar;lib\zt-zip.jar" org.develnext.jphp.ext.javafx.FXLauncher
  2⤵
  PID:2864

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2864-49-0x00000000024A0000-0x00000000044A0000-memory.dmp

Filesize
32.0MB

Download
memory/2864-50-0x00000000024A0000-0x00000000044A0000-memory.dmp

Filesize
32.0MB

Download
memory/2864-31-0x00000000001D0000-0x00000000001D1000-memory.dmp

Filesize
4KB

Download
memory/2864-32-0x00000000024A0000-0x00000000044A0000-memory.dmp

Filesize
32.0MB

Download
memory/2864-36-0x00000000024A0000-0x00000000044A0000-memory.dmp

Filesize
32.0MB

Download
memory/2864-37-0x00000000024A0000-0x00000000044A0000-memory.dmp

Filesize
32.0MB

Download
memory/2864-38-0x00000000024A0000-0x00000000044A0000-memory.dmp

Filesize
32.0MB

Download
memory/2864-39-0x00000000024A0000-0x00000000044A0000-memory.dmp

Filesize
32.0MB

Download
memory/2864-41-0x00000000024A0000-0x00000000044A0000-memory.dmp

Filesize
32.0MB

Download
memory/2864-42-0x00000000024A0000-0x00000000044A0000-memory.dmp

Filesize
32.0MB

Download
memory/2864-43-0x00000000024A0000-0x00000000044A0000-memory.dmp

Filesize
32.0MB

Download
memory/2864-44-0x00000000024A0000-0x00000000044A0000-memory.dmp

Filesize
32.0MB

Download
memory/2864-45-0x00000000024A0000-0x00000000044A0000-memory.dmp

Filesize
32.0MB

Download
memory/2864-46-0x00000000024A0000-0x00000000044A0000-memory.dmp

Filesize
32.0MB

Download
memory/2864-47-0x00000000024A0000-0x00000000044A0000-memory.dmp

Filesize
32.0MB

Download
memory/2864-48-0x00000000024A0000-0x00000000044A0000-memory.dmp

Filesize
32.0MB

Download
memory/2864-28-0x00000000024A0000-0x00000000044A0000-memory.dmp

Filesize
32.0MB

Download
memory/2864-89-0x00000000024A0000-0x00000000044A0000-memory.dmp

Filesize
32.0MB

Download
memory/2864-51-0x00000000024A0000-0x00000000044A0000-memory.dmp

Filesize
32.0MB

Download
memory/2864-52-0x00000000024A0000-0x00000000044A0000-memory.dmp

Filesize
32.0MB

Download
memory/2864-53-0x00000000024A0000-0x00000000044A0000-memory.dmp

Filesize
32.0MB

Download
memory/2864-54-0x00000000024A0000-0x00000000044A0000-memory.dmp

Filesize
32.0MB

Download
memory/2864-55-0x00000000024A0000-0x00000000044A0000-memory.dmp

Filesize
32.0MB

Download
memory/2864-59-0x00000000001D0000-0x00000000001D1000-memory.dmp

Filesize
4KB

Download
memory/2864-61-0x00000000024A0000-0x00000000044A0000-memory.dmp

Filesize
32.0MB

Download
memory/2864-63-0x00000000024A0000-0x00000000044A0000-memory.dmp

Filesize
32.0MB

Download
memory/2864-66-0x00000000024A0000-0x00000000044A0000-memory.dmp

Filesize
32.0MB

Download
memory/2864-67-0x00000000024A0000-0x00000000044A0000-memory.dmp

Filesize
32.0MB

Download
memory/2864-69-0x00000000024A0000-0x00000000044A0000-memory.dmp

Filesize
32.0MB

Download
memory/2864-74-0x00000000024A0000-0x00000000044A0000-memory.dmp

Filesize
32.0MB

Download
memory/2864-76-0x00000000024A0000-0x00000000044A0000-memory.dmp

Filesize
32.0MB

Download
memory/2864-80-0x00000000024A0000-0x00000000044A0000-memory.dmp

Filesize
32.0MB

Download
memory/2864-82-0x00000000024A0000-0x00000000044A0000-memory.dmp

Filesize
32.0MB

Download
memory/2864-85-0x00000000024A0000-0x00000000044A0000-memory.dmp

Filesize
32.0MB

Download
memory/2888-0-0x0000000000400000-0x0000000000425000-memory.dmp

Filesize
148KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads