Analysis
- max time kernel
146s - max time network
158s - platform
windows11-21h2_x64 - resource
win11-20240412-en - resource tags
- submitted
15/04/2024, 09:47
General
- Target platformBinary32/bin/apktool.bat
- Size 135B
- Sample240415-lsdk7sbd88
- SHA256 3d8108beb40535e68e7f6421a4309408ea5efab91707fa25d862154e3cc9b6df
Score
1/10
Malware Config
Signatures
- Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\platformBinary32\bin\apktool.bat"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\platformBinary32\bin\java.exejava -jar -Duser.language=en "C:\Users\Admin\AppData\Local\Temp\platformBinary32\bin\\apktool.jar"2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3908-7-0x00000000023B0000-0x00000000043B0000-memory.dmp
memory/3908-12-0x00000000023B0000-0x00000000043B0000-memory.dmp
memory/3908-20-0x00000000023B0000-0x00000000043B0000-memory.dmp
memory/3908-31-0x00000000023B0000-0x00000000043B0000-memory.dmp
memory/3908-32-0x0000000002210000-0x0000000002211000-memory.dmp
memory/3908-33-0x00000000023F0000-0x00000000023F8000-memory.dmp
memory/3908-34-0x0000000002458000-0x0000000002460000-memory.dmp
memory/3908-35-0x0000000002460000-0x0000000002468000-memory.dmp
memory/3908-36-0x00000000023B0000-0x00000000043B0000-memory.dmp
memory/3908-37-0x00000000023B0000-0x00000000043B0000-memory.dmp