75f2450c9475b0adef291c84d08dd8ba99c011d2ee34caef0f34340ef4c6b4e6

Analysis

max time kernel
147s
max time network
131s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
06/04/2024, 05:10

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

FREAKIN/jre/bin/javacpl.exe
Size

68KB
MD5

c2a59c7343d370bc57765896490331e5
SHA1

a50af979e08a65eb370763a7f70cdb0e179d705d
SHA256

40614fe8b91e01ad3562102e440bdbf5fac5d9f7292c6b16a58f723bfffe6066
SHA512

ca266f1b2e51f66d119e2d71e3377c229a3d583853ffb606c101afeb41689ace7d1f1594781091da67f9be9d09f3019bf048c0f819777e8f1827a56beec252c4
SSDEEP

768:jFVfr2k521ZnrawwMmqPXt+rP3b/9/YMCxx0OpPOrEE14EVHLAuDeGJiqrmehiV9:PxioMmqF+2x0MORLVq7qjh3rmKPNpwGg

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2124	javaw.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1716 wrote to memory of 2124	1716	javacpl.exe	28
PID 1716 wrote to memory of 2124	1716	javacpl.exe	28
PID 1716 wrote to memory of 2124	1716	javacpl.exe	28
PID 1716 wrote to memory of 2124	1716	javacpl.exe	28

C:\Users\Admin\AppData\Local\Temp\FREAKIN\jre\bin\javacpl.exe
"C:\Users\Admin\AppData\Local\Temp\FREAKIN\jre\bin\javacpl.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1716
- C:\Users\Admin\AppData\Local\Temp\FREAKIN\jre\bin\javaw.exe
  "C:\Users\Admin\AppData\Local\Temp\FREAKIN\jre\bin\javaw.exe" -Xbootclasspath/a:"C:\Users\Admin\AppData\Local\Temp\FREAKIN\jre\bin\..\lib\deploy.jar" -Djava.locale.providers=HOST,JRE,SPI -Duser.home="C:\Users\Admin" com.sun.deploy.panel.ControlPanel
  2⤵
  - Suspicious use of SetWindowsHookEx
  PID:2124

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2124-2-0x00000000024C0000-0x00000000044C0000-memory.dmp

Filesize
32.0MB

Download
memory/2124-17-0x00000000024C0000-0x00000000044C0000-memory.dmp

Filesize
32.0MB

Download
memory/2124-24-0x00000000024C0000-0x00000000044C0000-memory.dmp

Filesize
32.0MB

Download
memory/2124-31-0x00000000024C0000-0x00000000044C0000-memory.dmp

Filesize
32.0MB

Download
memory/2124-32-0x00000000024C0000-0x00000000044C0000-memory.dmp

Filesize
32.0MB

Download
memory/2124-34-0x0000000000170000-0x0000000000171000-memory.dmp

Filesize
4KB

Download
memory/2124-35-0x00000000024C0000-0x00000000044C0000-memory.dmp

Filesize
32.0MB

Download
memory/2124-36-0x00000000024C0000-0x00000000044C0000-memory.dmp

Filesize
32.0MB

Download
memory/2124-37-0x00000000024C0000-0x00000000044C0000-memory.dmp

Filesize
32.0MB

Download
memory/2124-38-0x00000000024C0000-0x00000000044C0000-memory.dmp

Filesize
32.0MB

Download
memory/2124-39-0x00000000024C0000-0x00000000044C0000-memory.dmp

Filesize
32.0MB

Download
memory/2124-40-0x0000000000170000-0x0000000000171000-memory.dmp

Filesize
4KB

Download
memory/2124-44-0x0000000000170000-0x0000000000171000-memory.dmp

Filesize
4KB

Download
memory/2124-45-0x0000000000230000-0x000000000023A000-memory.dmp

Filesize
40KB

Download
memory/2124-46-0x0000000000230000-0x000000000023A000-memory.dmp

Filesize
40KB

Download
memory/2124-48-0x0000000000170000-0x0000000000171000-memory.dmp

Filesize
4KB

Download
memory/2124-50-0x00000000024C0000-0x00000000044C0000-memory.dmp

Filesize
32.0MB

Download
memory/2124-54-0x0000000000170000-0x0000000000171000-memory.dmp

Filesize
4KB

Download
memory/2124-55-0x00000000024C0000-0x00000000044C0000-memory.dmp

Filesize
32.0MB

Download
memory/2124-62-0x00000000024C0000-0x00000000044C0000-memory.dmp

Filesize
32.0MB

Download
memory/2124-61-0x00000000024C0000-0x00000000044C0000-memory.dmp

Filesize
32.0MB

Download
memory/2124-69-0x00000000024C0000-0x00000000044C0000-memory.dmp

Filesize
32.0MB

Download
memory/2124-70-0x00000000024C0000-0x00000000044C0000-memory.dmp

Filesize
32.0MB

Download
memory/2124-71-0x0000000000170000-0x0000000000171000-memory.dmp

Filesize
4KB

Download
memory/2124-72-0x00000000024C0000-0x00000000044C0000-memory.dmp

Filesize
32.0MB

Download
memory/2124-73-0x00000000024C0000-0x00000000044C0000-memory.dmp

Filesize
32.0MB

Download
memory/2124-74-0x00000000024C0000-0x00000000044C0000-memory.dmp

Filesize
32.0MB

Download
memory/2124-75-0x00000000024C0000-0x00000000044C0000-memory.dmp

Filesize
32.0MB

Download
memory/2124-76-0x00000000024C0000-0x00000000044C0000-memory.dmp

Filesize
32.0MB

Download
memory/2124-80-0x00000000024C0000-0x00000000044C0000-memory.dmp

Filesize
32.0MB

Download
memory/2124-84-0x0000000000170000-0x0000000000171000-memory.dmp

Filesize
4KB

Download
memory/2124-85-0x00000000024C0000-0x00000000044C0000-memory.dmp

Filesize
32.0MB

Download
memory/2124-87-0x0000000000230000-0x000000000023A000-memory.dmp

Filesize
40KB

Download
memory/2124-86-0x00000000024C0000-0x00000000044C0000-memory.dmp

Filesize
32.0MB

Download
memory/2124-88-0x0000000000230000-0x000000000023A000-memory.dmp

Filesize
40KB

Download
memory/2124-91-0x00000000024C0000-0x00000000044C0000-memory.dmp

Filesize
32.0MB

Download
memory/2124-92-0x00000000024C0000-0x00000000044C0000-memory.dmp

Filesize
32.0MB

Download
memory/2124-94-0x00000000024C0000-0x00000000044C0000-memory.dmp

Filesize
32.0MB

Download
memory/2124-96-0x0000000000170000-0x0000000000171000-memory.dmp

Filesize
4KB

Download
memory/2124-99-0x00000000024C0000-0x00000000044C0000-memory.dmp

Filesize
32.0MB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads