Overview
overview
10Static
static
3RainwaySetup.exe
windows7-x64
7RainwaySetup.exe
windows10-2004-x64
10$TEMP/Feel...o.jnlp
windows7-x64
1$TEMP/Feel...o.jnlp
windows10-2004-x64
7$TEMP/Feel...R.jnlp
windows7-x64
1$TEMP/Feel...R.jnlp
windows10-2004-x64
1$TEMP/Feel...v.jnlp
windows7-x64
1$TEMP/Feel...v.jnlp
windows10-2004-x64
1$TEMP/Feel...N.jnlp
windows7-x64
1$TEMP/Feel...N.jnlp
windows10-2004-x64
1$TEMP/Feel...K.jnlp
windows7-x64
1$TEMP/Feel...K.jnlp
windows10-2004-x64
1$TEMP/Feel...W.jnlp
windows7-x64
1$TEMP/Feel...W.jnlp
windows10-2004-x64
1$TEMP/Feel...32.jar
windows7-x64
1$TEMP/Feel...32.jar
windows10-2004-x64
7$TEMP/Feel...ge.jar
windows7-x64
1$TEMP/Feel...ge.jar
windows10-2004-x64
7$TEMP/Feel...ta.jar
windows7-x64
1$TEMP/Feel...ta.jar
windows10-2004-x64
7$TEMP/Feel...ns.jar
windows7-x64
1$TEMP/Feel...ns.jar
windows10-2004-x64
7$TEMP/Feel...ss.jar
windows7-x64
1$TEMP/Feel...ss.jar
windows10-2004-x64
7$TEMP/Feel...rt.jar
windows7-x64
1$TEMP/Feel...rt.jar
windows10-2004-x64
7$TEMP/Feel...ta.jar
windows7-x64
1$TEMP/Feel...ta.jar
windows10-2004-x64
7$TEMP/Feel...rn.jar
windows7-x64
1$TEMP/Feel...rn.jar
windows10-2004-x64
7$TEMP/Feel...ec.jar
windows7-x64
1$TEMP/Feel...ec.jar
windows10-2004-x64
7Analysis
- max time kernel
359s - max time network
362s - platform
windows7_x64 - resource
win7-20240215-en - resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system - submitted
19/03/2024, 22:08
Static task
static1
Behavioral task
behavioral1
Sample
RainwaySetup.exe
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral2
Sample
RainwaySetup.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
$TEMP/FeelingEyestrain-Launcher/u571/lib/deploy/messages_ko.jnlp
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral4
Sample
$TEMP/FeelingEyestrain-Launcher/u571/lib/deploy/messages_ko.jnlp
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
$TEMP/FeelingEyestrain-Launcher/u571/lib/deploy/messages_pt_BR.jnlp
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral6
Sample
$TEMP/FeelingEyestrain-Launcher/u571/lib/deploy/messages_pt_BR.jnlp
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
$TEMP/FeelingEyestrain-Launcher/u571/lib/deploy/messages_sv.jnlp
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral8
Sample
$TEMP/FeelingEyestrain-Launcher/u571/lib/deploy/messages_sv.jnlp
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
$TEMP/FeelingEyestrain-Launcher/u571/lib/deploy/messages_zh_CN.jnlp
Resource
win7-20240215-en
windows7-x64
Behavioral task
behavioral10
Sample
$TEMP/FeelingEyestrain-Launcher/u571/lib/deploy/messages_zh_CN.jnlp
Resource
win10v2004-20240319-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
$TEMP/FeelingEyestrain-Launcher/u571/lib/deploy/messages_zh_HK.jnlp
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral12
Sample
$TEMP/FeelingEyestrain-Launcher/u571/lib/deploy/messages_zh_HK.jnlp
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
$TEMP/FeelingEyestrain-Launcher/u571/lib/deploy/messages_zh_TW.jnlp
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral14
Sample
$TEMP/FeelingEyestrain-Launcher/u571/lib/deploy/messages_zh_TW.jnlp
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
$TEMP/FeelingEyestrain-Launcher/u571/lib/ext/access-bridge-32.jar
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral16
Sample
$TEMP/FeelingEyestrain-Launcher/u571/lib/ext/access-bridge-32.jar
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
$TEMP/FeelingEyestrain-Launcher/u571/lib/ext/access-bridge.jar
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral18
Sample
$TEMP/FeelingEyestrain-Launcher/u571/lib/ext/access-bridge.jar
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
$TEMP/FeelingEyestrain-Launcher/u571/lib/ext/cldrdata.jar
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral20
Sample
$TEMP/FeelingEyestrain-Launcher/u571/lib/ext/cldrdata.jar
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
$TEMP/FeelingEyestrain-Launcher/u571/lib/ext/dnsns.jar
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral22
Sample
$TEMP/FeelingEyestrain-Launcher/u571/lib/ext/dnsns.jar
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
$TEMP/FeelingEyestrain-Launcher/u571/lib/ext/jaccess.jar
Resource
win7-20231129-en
windows7-x64
Behavioral task
behavioral24
Sample
$TEMP/FeelingEyestrain-Launcher/u571/lib/ext/jaccess.jar
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
$TEMP/FeelingEyestrain-Launcher/u571/lib/ext/jfxrt.jar
Resource
win7-20231129-en
windows7-x64
Behavioral task
behavioral26
Sample
$TEMP/FeelingEyestrain-Launcher/u571/lib/ext/jfxrt.jar
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
$TEMP/FeelingEyestrain-Launcher/u571/lib/ext/localedata.jar
Resource
win7-20240215-en
windows7-x64
Behavioral task
behavioral28
Sample
$TEMP/FeelingEyestrain-Launcher/u571/lib/ext/localedata.jar
Resource
win10v2004-20240319-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
$TEMP/FeelingEyestrain-Launcher/u571/lib/ext/nashorn.jar
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral30
Sample
$TEMP/FeelingEyestrain-Launcher/u571/lib/ext/nashorn.jar
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
$TEMP/FeelingEyestrain-Launcher/u571/lib/ext/sunec.jar
Resource
win7-20240215-en
windows7-x64
Behavioral task
behavioral32
Sample
$TEMP/FeelingEyestrain-Launcher/u571/lib/ext/sunec.jar
Resource
win10v2004-20240226-en
windows10-2004-x64
General
- Target $TEMP/FeelingEyestrain-Launcher/u571/lib/deploy/messages_zh_CN.jnlp
- Size 4KB
- Sample240319-12pgdsha44
- SHA256 86663ded105b77261c0556468a93bc8666a094b918299a61af0a8e30f42019c7
- MD5 823d1f655440c3912dd1f965a23363fc
- SHA1 50b941a38b9c5f565f893e1e0824f7619f51185c
- SHA512 1ebf989d2121cf05ffc912b9b228c4d4523763eb1a689ec74568d811c88dcf11032ffc8007bb24daf7d079b580662b77d94b4b8d71a2e891ef27979ff32cd727
- SSDEEP 96:Me7R8zl0Zf4z3X4Gv2hEpeStEKADydYL1WfK0eSm91j7:1R8pOfWHJvOJT1WPtK1j7
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3032 javaws.exe