94d8b6f9aaf668356cc58c264e3644fef37ffea41e8901dcb7b738e3ad5e6a77

Analysis

max time kernel
142s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
12-02-2024 04:36

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Setup.exe
Size

42KB
MD5

5e4087f62f79c1d88ebc506ce62ba894
SHA1

2e2001b04dbbb66c7c49510963ada5ba12377699
SHA256

fc000a126fe4d75e0e3abf49c9f1acd8d353e212206c581c082478f49d2cef3b
SHA512

80c0f34e4235452c91afbb55209019a32aca6b3d7f4100a9c501281b44e90332fd93ec531b131e3493445e056519322ec7ba2b49081725cdc4f19c994fdef8bb
SSDEEP

768:+7Zw33FNUf6Nhd/fQ1l+0vM0iT9UM2ryzOUKFKcMke+:UZ2FWSNhd/4131iKMqwIr6+

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4140	javaw.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 5020 wrote to memory of 4140	5020	Setup.exe	19
PID 5020 wrote to memory of 4140	5020	Setup.exe	19
PID 5020 wrote to memory of 4140	5020	Setup.exe	19

C:\Users\Admin\AppData\Local\Temp\Setup.exe
"C:\Users\Admin\AppData\Local\Temp\Setup.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:5020
- C:\Users\Admin\AppData\Local\Temp\jre\bin\javaw.exe
  "C:\Users\Admin\AppData\Local\Temp\jre\bin\javaw.exe" -Dfile.encoding=UTF-8 -classpath "lib\.;lib\..;lib\activation.jar;lib\antlr4-runtime.jar;lib\asm-all.jar;lib\commons-email.jar;lib\connector-api.jar;lib\dn-compiled-module.jar;lib\dn-php-sdk.jar;lib\dyn4j.jar;lib\gson.jar;lib\HikariCP-java6.jar;lib\javassist-GA.jar;lib\jaybird-jdk18.jar;lib\jfoenix.jar;lib\jkeymaster.jar;lib\jna.jar;lib\jphp-app-framework.jar;lib\jphp-core.jar;lib\jphp-desktop-ext.jar;lib\jphp-desktop-hotkey-ext.jar;lib\jphp-game-ext.jar;lib\jphp-gui-ext.jar;lib\jphp-gui-jfoenix-ext.jar;lib\jphp-json-ext.jar;lib\jphp-jsoup-ext.jar;lib\jphp-mail-ext.jar;lib\jphp-runtime.jar;lib\jphp-sql-ext.jar;lib\jphp-systemtray-ext.jar;lib\jphp-xml-ext.jar;lib\jphp-zend-ext.jar;lib\jphp-zip-ext.jar;lib\jsoup.jar;lib\mail.jar;lib\mysql-connector-java.jar;lib\postgresql.jre7.jar;lib\slf4j-api.jar;lib\slf4j-simple.jar;lib\sqlite-jdbc.jar;lib\zt-zip.jar" org.develnext.jphp.ext.javafx.FXLauncher
  2⤵
  - Suspicious use of SetWindowsHookEx
  PID:4140

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4140-90-0x0000000002390000-0x0000000004390000-memory.dmp

Filesize
32.0MB

Download
memory/4140-38-0x0000000002390000-0x0000000004390000-memory.dmp

Filesize
32.0MB

Download
memory/4140-17-0x0000000002390000-0x0000000004390000-memory.dmp

Filesize
32.0MB

Download
memory/4140-23-0x0000000002390000-0x0000000004390000-memory.dmp

Filesize
32.0MB

Download
memory/4140-33-0x00000000008A0000-0x00000000008A1000-memory.dmp

Filesize
4KB

Download
memory/4140-34-0x0000000002390000-0x0000000004390000-memory.dmp

Filesize
32.0MB

Download
memory/4140-93-0x0000000002390000-0x0000000004390000-memory.dmp

Filesize
32.0MB

Download
memory/4140-37-0x00000000008A0000-0x00000000008A1000-memory.dmp

Filesize
4KB

Download
memory/4140-44-0x0000000002390000-0x0000000004390000-memory.dmp

Filesize
32.0MB

Download
memory/4140-48-0x0000000002390000-0x0000000004390000-memory.dmp

Filesize
32.0MB

Download
memory/4140-51-0x0000000002390000-0x0000000004390000-memory.dmp

Filesize
32.0MB

Download
memory/4140-96-0x00000000008A0000-0x00000000008A1000-memory.dmp

Filesize
4KB

Download
memory/4140-60-0x0000000002390000-0x0000000004390000-memory.dmp

Filesize
32.0MB

Download
memory/4140-64-0x0000000002390000-0x0000000004390000-memory.dmp

Filesize
32.0MB

Download
memory/4140-66-0x0000000002390000-0x0000000004390000-memory.dmp

Filesize
32.0MB

Download
memory/4140-69-0x0000000002390000-0x0000000004390000-memory.dmp

Filesize
32.0MB

Download
memory/4140-71-0x0000000002390000-0x0000000004390000-memory.dmp

Filesize
32.0MB

Download
memory/4140-76-0x0000000002390000-0x0000000004390000-memory.dmp

Filesize
32.0MB

Download
memory/4140-77-0x0000000002390000-0x0000000004390000-memory.dmp

Filesize
32.0MB

Download
memory/4140-78-0x0000000002390000-0x0000000004390000-memory.dmp

Filesize
32.0MB

Download
memory/4140-214-0x0000000002550000-0x0000000002558000-memory.dmp

Filesize
32KB

Download
memory/4140-81-0x0000000002390000-0x0000000004390000-memory.dmp

Filesize
32.0MB

Download
memory/4140-82-0x0000000002390000-0x0000000004390000-memory.dmp

Filesize
32.0MB

Download
memory/4140-85-0x0000000002390000-0x0000000004390000-memory.dmp

Filesize
32.0MB

Download
memory/4140-79-0x0000000002390000-0x0000000004390000-memory.dmp

Filesize
32.0MB

Download
memory/4140-9-0x0000000002390000-0x0000000004390000-memory.dmp

Filesize
32.0MB

Download
memory/4140-56-0x0000000002390000-0x0000000004390000-memory.dmp

Filesize
32.0MB

Download
memory/4140-97-0x0000000002390000-0x0000000004390000-memory.dmp

Filesize
32.0MB

Download
memory/4140-99-0x00000000008A0000-0x00000000008A1000-memory.dmp

Filesize
4KB

Download
memory/4140-101-0x0000000002390000-0x0000000004390000-memory.dmp

Filesize
32.0MB

Download
memory/4140-102-0x0000000002390000-0x0000000004390000-memory.dmp

Filesize
32.0MB

Download
memory/4140-103-0x0000000002390000-0x0000000004390000-memory.dmp

Filesize
32.0MB

Download
memory/4140-107-0x0000000002390000-0x0000000004390000-memory.dmp

Filesize
32.0MB

Download
memory/4140-178-0x0000000002390000-0x0000000004390000-memory.dmp

Filesize
32.0MB

Download
memory/4140-182-0x0000000002390000-0x0000000004390000-memory.dmp

Filesize
32.0MB

Download
memory/4140-185-0x0000000002390000-0x0000000004390000-memory.dmp

Filesize
32.0MB

Download
memory/4140-189-0x0000000002390000-0x0000000004390000-memory.dmp

Filesize
32.0MB

Download
memory/4140-196-0x0000000002390000-0x0000000004390000-memory.dmp

Filesize
32.0MB

Download
memory/4140-199-0x0000000002390000-0x0000000004390000-memory.dmp

Filesize
32.0MB

Download
memory/4140-200-0x0000000002390000-0x0000000004390000-memory.dmp

Filesize
32.0MB

Download
memory/4140-201-0x0000000002390000-0x0000000004390000-memory.dmp

Filesize
32.0MB

Download
memory/4140-202-0x0000000002390000-0x0000000004390000-memory.dmp

Filesize
32.0MB

Download
memory/4140-203-0x0000000002390000-0x0000000004390000-memory.dmp

Filesize
32.0MB

Download
memory/4140-204-0x0000000002390000-0x0000000004390000-memory.dmp

Filesize
32.0MB

Download
memory/4140-205-0x0000000002390000-0x0000000004390000-memory.dmp

Filesize
32.0MB

Download
memory/4140-206-0x0000000002390000-0x0000000004390000-memory.dmp

Filesize
32.0MB

Download
memory/4140-213-0x0000000002558000-0x0000000002560000-memory.dmp

Filesize
32KB

Download
memory/4140-215-0x0000000002390000-0x0000000004390000-memory.dmp

Filesize
32.0MB

Download
memory/5020-0-0x0000000000400000-0x0000000000415000-memory.dmp

Filesize
84KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads