Resubmissions

11-03-2024 15:39

240311-s32jcaed9w 7

11-03-2024 15:38

240311-s3edtaae27 7

Analysis

  • max time kernel
    15s
  • max time network
    17s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    11-03-2024 15:38

General

  • Target

    spongevanilla-1.12.2-7.4.7.jar

  • Size

    24.6MB

  • MD5

    51d712bc85a09f97563dd46b7ffe1669

  • SHA1

    05031b37ea56ab18ee7bd8cba23c18f89d7ab750

  • SHA256

    fb5decfc7ee903382bfb1c18008210b33c6db6390ad48c3ba9e5c2d43614e229

  • SHA512

    34b48c7d6c24d4bc1bf4e0e961ab85a40809851b957ff0acd414ed48ebaef14c27ec2b6f18064195424374e09be5943c9c4aac59931ee8e124dada150e2a25f1

  • SSDEEP

    393216:KmkzQNQLk7xMf+1K4ZqFurLZJkK6BQAYzOJIX6FJhYn/mo7b7cBO5If:KMNRxMfiK4ZqCHNziFYn+Ab7v5If

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Windows\system32\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\spongevanilla-1.12.2-7.4.7.jar
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1720

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1720-6-0x0000000002630000-0x0000000005630000-memory.dmp

    Filesize

    48.0MB

  • memory/1720-15-0x00000000003C0000-0x00000000003CA000-memory.dmp

    Filesize

    40KB

  • memory/1720-14-0x00000000003C0000-0x00000000003CA000-memory.dmp

    Filesize

    40KB

  • memory/1720-17-0x0000000000140000-0x0000000000141000-memory.dmp

    Filesize

    4KB

  • memory/1720-23-0x0000000000140000-0x0000000000141000-memory.dmp

    Filesize

    4KB

  • memory/1720-24-0x00000000003C0000-0x00000000003C2000-memory.dmp

    Filesize

    8KB