b7e4b4cba044fe5c1c9a4ab2eca108eff1ff3bf7ff1fde14668873b81d3564c9

Analysis

max time kernel
119s
max time network
128s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
09/03/2024, 01:01

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

NexaByte Launcher.exe
Size

18.3MB
MD5

930282d90b92b381ab089847952f71ce
SHA1

af490ea123c879490e32985b45ac48859b70b0d8
SHA256

c6aff9c623bf6f254bd78e6ab3fdccb6a8402981708e801345d9fbc81d622c88
SHA512

5819f177751c0ef344a61d2a666a406b1e5e08d9756f710fb5a146ef21a6e106bc9b46b6d039403a325715a9330f8590c1bf0491040c1d63bd8ae6533318a931
SSDEEP

393216:f00cMwBDHJacJEE6ZElIlTFGw0CKM8FZPG6IOyS/Uv/PhH7:f1cMw5P6d8ITFGCkFOe0b

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 14 IoCs

description	pid	Process	procid_target
PID 2912 wrote to memory of 2324	2912	NexaByte Launcher.exe	28
PID 2912 wrote to memory of 2324	2912	NexaByte Launcher.exe	28
PID 2912 wrote to memory of 2324	2912	NexaByte Launcher.exe	28
PID 2912 wrote to memory of 2324	2912	NexaByte Launcher.exe	28
PID 2912 wrote to memory of 2324	2912	NexaByte Launcher.exe	28
PID 2912 wrote to memory of 2324	2912	NexaByte Launcher.exe	28
PID 2912 wrote to memory of 2324	2912	NexaByte Launcher.exe	28
PID 2912 wrote to memory of 2676	2912	NexaByte Launcher.exe	29
PID 2912 wrote to memory of 2676	2912	NexaByte Launcher.exe	29
PID 2912 wrote to memory of 2676	2912	NexaByte Launcher.exe	29
PID 2912 wrote to memory of 2676	2912	NexaByte Launcher.exe	29
PID 2912 wrote to memory of 2676	2912	NexaByte Launcher.exe	29
PID 2912 wrote to memory of 2676	2912	NexaByte Launcher.exe	29
PID 2912 wrote to memory of 2676	2912	NexaByte Launcher.exe	29

C:\Users\Admin\AppData\Local\Temp\NexaByte Launcher.exe
"C:\Users\Admin\AppData\Local\Temp\NexaByte Launcher.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2912
- C:\Users\Admin\AppData\Local\Temp\v1773\bin\javaw.exe
  "C:\Users\Admin\AppData\Local\Temp\v1773\bin\javaw.exe" -version
  2⤵
  PID:2324
- C:\Users\Admin\AppData\Local\Temp\v1773\bin\javaw.exe
  "C:\Users\Admin\AppData\Local\Temp\v1773\bin\javaw.exe" -jar "C:\Users\Admin\AppData\Local\Temp\NexaByte Launcher.exe"
  2⤵
  PID:2676

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\.oracle_jre_usage\6502d6fd28f55398.timestamp

Filesize
56B

MD5
ee0c7908b40b7ca9fe4ed6cf78cbe141

SHA1
33df1a4bb493528793202de40b0ee613b7ae5659

SHA256
4167dfdb6e0c6867e9517c5fd8afdb748eb84604e2c96f8a0ec6298611928197

SHA512
9f7f6cda5f84881a8ad26a919803da6faaa9db81a7a7632fac6f5a2d20db99d26c9c7b211c0c89a9f96531b1d2ba3e6df9a30871c8a4c5d9b9b959cc64b0b36f

Download Submit
memory/2324-16-0x0000000002900000-0x0000000004900000-memory.dmp

Filesize
32.0MB

Download
memory/2324-23-0x0000000002900000-0x0000000004900000-memory.dmp

Filesize
32.0MB

Download
memory/2324-29-0x0000000000190000-0x0000000000191000-memory.dmp

Filesize
4KB

Download
memory/2324-30-0x0000000002900000-0x0000000004900000-memory.dmp

Filesize
32.0MB

Download
memory/2324-31-0x0000000002938000-0x0000000002940000-memory.dmp

Filesize
32KB

Download
memory/2324-32-0x0000000002940000-0x0000000002948000-memory.dmp

Filesize
32KB

Download
memory/2324-34-0x0000000002900000-0x0000000004900000-memory.dmp

Filesize
32.0MB

Download
memory/2324-113-0x0000000002900000-0x0000000004900000-memory.dmp

Filesize
32.0MB

Download
memory/2324-8-0x0000000002900000-0x0000000004900000-memory.dmp

Filesize
32.0MB

Download
memory/2676-70-0x0000000002AA0000-0x0000000004AA0000-memory.dmp

Filesize
32.0MB

Download
memory/2676-83-0x0000000002AA0000-0x0000000004AA0000-memory.dmp

Filesize
32.0MB

Download
memory/2676-66-0x0000000002AA0000-0x0000000004AA0000-memory.dmp

Filesize
32.0MB

Download
memory/2676-68-0x0000000000190000-0x0000000000191000-memory.dmp

Filesize
4KB

Download
memory/2676-40-0x0000000002AA0000-0x0000000004AA0000-memory.dmp

Filesize
32.0MB

Download
memory/2676-72-0x0000000002AA0000-0x0000000004AA0000-memory.dmp

Filesize
32.0MB

Download
memory/2676-76-0x0000000002AA0000-0x0000000004AA0000-memory.dmp

Filesize
32.0MB

Download
memory/2676-78-0x0000000002AA0000-0x0000000004AA0000-memory.dmp

Filesize
32.0MB

Download
memory/2676-80-0x0000000002AA0000-0x0000000004AA0000-memory.dmp

Filesize
32.0MB

Download
memory/2676-59-0x0000000002AA0000-0x0000000004AA0000-memory.dmp

Filesize
32.0MB

Download
memory/2676-88-0x0000000002AA0000-0x0000000004AA0000-memory.dmp

Filesize
32.0MB

Download
memory/2676-92-0x0000000002AA0000-0x0000000004AA0000-memory.dmp

Filesize
32.0MB

Download
memory/2676-94-0x0000000002AA0000-0x0000000004AA0000-memory.dmp

Filesize
32.0MB

Download
memory/2676-99-0x0000000002AA0000-0x0000000004AA0000-memory.dmp

Filesize
32.0MB

Download
memory/2676-101-0x0000000002AA0000-0x0000000004AA0000-memory.dmp

Filesize
32.0MB

Download
memory/2676-104-0x0000000002AA0000-0x0000000004AA0000-memory.dmp

Filesize
32.0MB

Download
memory/2676-108-0x0000000002AA0000-0x0000000004AA0000-memory.dmp

Filesize
32.0MB

Download
memory/2676-111-0x0000000000190000-0x0000000000191000-memory.dmp

Filesize
4KB

Download
memory/2912-33-0x0000000000400000-0x000000000041E000-memory.dmp

Filesize
120KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads