Analysis
- max time kernel
159s - max time network
168s - platform
windows10-2004_x64 - resource
win10v2004-20240221-en - resource tags
- submitted
24/02/2024, 17:42
General
- Target TLauncher.exe
- Size 8.9MB
- Sample240224-v92tsshg42
- SHA256 978dfe8f0fbb57398366e2302055b58fa641258f53db6909fca2b5a1e87ff3c5
Malware Config
Signatures
- Modifies file permissions 1 TTPs 1 IoCs
- Suspicious use of SetWindowsHookEx 2 IoCs
- Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\TLauncher.exe"C:\Users\Admin\AppData\Local\Temp\TLauncher.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Java\jre-1.8\bin\javaw.exe"C:\Program Files\Java\jre-1.8\bin\javaw.exe" -jar "C:\Users\Admin\AppData\Local\Temp\TLauncher.exe"2⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\icacls.exeC:\Windows\system32\icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant "everyone":(OI)(CI)M3⤵
- Modifies file permissions
-
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
3903daac9bc4a3b7.timestamp
memory/3004-0-0x0000000000400000-0x0000000000417000-memory.dmp
memory/4900-47-0x0000021900000000-0x0000021901000000-memory.dmp
memory/4900-74-0x0000021974970000-0x0000021974971000-memory.dmp
memory/4900-22-0x0000021974970000-0x0000021974971000-memory.dmp
memory/4900-27-0x0000021900000000-0x0000021901000000-memory.dmp
memory/4900-31-0x0000021900000000-0x0000021901000000-memory.dmp
memory/4900-38-0x0000021900000000-0x0000021901000000-memory.dmp
memory/4900-3-0x0000021900000000-0x0000021901000000-memory.dmp
memory/4900-58-0x0000021900000000-0x0000021901000000-memory.dmp
memory/4900-65-0x0000021974970000-0x0000021974971000-memory.dmp
memory/4900-13-0x0000021974970000-0x0000021974971000-memory.dmp
memory/4900-90-0x0000021974970000-0x0000021974971000-memory.dmp
memory/4900-99-0x0000021974970000-0x0000021974971000-memory.dmp
memory/4900-103-0x0000021900000000-0x0000021901000000-memory.dmp
memory/4900-112-0x0000021900000000-0x0000021901000000-memory.dmp
memory/4900-114-0x0000021974970000-0x0000021974971000-memory.dmp
memory/4900-115-0x0000021974970000-0x0000021974971000-memory.dmp
memory/4900-118-0x0000021974970000-0x0000021974971000-memory.dmp