506f38d62951d1ca74d169e4b4517a320bab7d94eb710f2e568743ff99905f15

Analysis

max time kernel
121s
max time network
125s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
28/02/2024, 08:06

Target

MC-Session-Stealer-main/gradlew.bat
Size

2KB
MD5

0ea6d812cf51675a8503fe23ae178996
SHA1

8751d7831ca6cd1cad48e1475a79596b54b48994
SHA256

f4f428c5626b3d90cef3bd4e7fd3ad3ea5760442db8c09d586b5bfe031dbe5e3
SHA512

ea052888a8e361670cd7051c6313fc838f579a54288ed391361954f413df699c119236e7371149939045cd3aef48458d4991beed579e3cc1230e3bee1273de8f

Score

1^/10

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 2476 wrote to memory of 2628	2476	cmd.exe	29
PID 2476 wrote to memory of 2628	2476	cmd.exe	29
PID 2476 wrote to memory of 2628	2476	cmd.exe	29
PID 2476 wrote to memory of 2676	2476	cmd.exe	30
PID 2476 wrote to memory of 2676	2476	cmd.exe	30
PID 2476 wrote to memory of 2676	2476	cmd.exe	30

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\MC-Session-Stealer-main\gradlew.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:2476
- C:\Windows\system32\java.exe
  java.exe -version
  2⤵
  PID:2628
- C:\Windows\system32\java.exe
  "java.exe" "-Dorg.gradle.appname=gradlew" -classpath "C:\Users\Admin\AppData\Local\Temp\MC-Session-Stealer-main\\gradle\wrapper\gradle-wrapper.jar" org.gradle.wrapper.GradleWrapperMain
  2⤵
  PID:2676

memory/2628-3-0x0000000002160000-0x0000000005160000-memory.dmp

Filesize
48.0MB

Download
memory/2628-11-0x0000000000420000-0x0000000000421000-memory.dmp

Filesize
4KB

Download
memory/2628-12-0x0000000000420000-0x0000000000421000-memory.dmp

Filesize
4KB

Download
memory/2676-22-0x0000000002290000-0x0000000005290000-memory.dmp

Filesize
48.0MB

Download
memory/2676-24-0x0000000000220000-0x0000000000221000-memory.dmp

Filesize
4KB

Download
memory/2676-29-0x0000000000220000-0x0000000000221000-memory.dmp

Filesize
4KB

Download
memory/2676-48-0x0000000000220000-0x0000000000221000-memory.dmp

Filesize
4KB

Download
memory/2676-52-0x0000000000220000-0x0000000000221000-memory.dmp

Filesize
4KB

Download
memory/2676-53-0x0000000002290000-0x0000000005290000-memory.dmp

Filesize
48.0MB

Download