2b90d137def30c9e084acfd1a88626060a52236b00e9bc29dab0426360c71aa1

Analysis

max time kernel
15s
max time network
16s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
12/05/2024, 12:49

Target

SlipstreamModManager_1.9.1-Win/modman_admin.exe
Size

24KB
MD5

9576211545ea2a816e6c97fb3e81fa04
SHA1

1e3d2294f866159584b26e4d6ba47245c8f458e6
SHA256

4c65cf0eb984e07d2bfe8fbdc7157ef90cb16d22b9380f4268c306098b963871
SHA512

80dae8e1b18d27ca07099a239293b1ac8a42a259fab95140f699f06f3d122f8407ccee5809053a6453a9d79d559c99c004994adb3d5ace53cec8f583d80b0729
SSDEEP

384:z/sa65fiCF8ALY5XSgZk7MV3Rde8zbivpKkv3i:z/bCfiCdLY5XOMVhgoW

Score

1^/10

Suspicious use of SetWindowsHookEx 4 IoCs

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1392 wrote to memory of 1224	1392	modman_admin.exe	29
PID 1392 wrote to memory of 1224	1392	modman_admin.exe	29
PID 1392 wrote to memory of 1224	1392	modman_admin.exe	29
PID 1392 wrote to memory of 1224	1392	modman_admin.exe	29

C:\Users\Admin\AppData\Local\Temp\SlipstreamModManager_1.9.1-Win\modman_admin.exe
"C:\Users\Admin\AppData\Local\Temp\SlipstreamModManager_1.9.1-Win\modman_admin.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1392
- C:\Program Files\Java\jre7\bin\java.exe
  "C:\Program Files\Java\jre7\bin\java.exe" -classpath ".\modman.jar;modman.jar" net.vhati.modmanager.FTLModManager
  2⤵
  - Suspicious use of SetWindowsHookEx
  PID:1224

memory/1224-2-0x0000000002570000-0x00000000027E0000-memory.dmp

Filesize
2.4MB

Download
memory/1224-16-0x0000000000540000-0x000000000054A000-memory.dmp

Filesize
40KB

Download
memory/1224-15-0x0000000000540000-0x000000000054A000-memory.dmp

Filesize
40KB

Download
memory/1224-18-0x0000000000240000-0x0000000000241000-memory.dmp

Filesize
4KB

Download
memory/1224-19-0x0000000000240000-0x0000000000241000-memory.dmp

Filesize
4KB

Download
memory/1392-23-0x0000000000400000-0x0000000000413000-memory.dmp

Filesize
76KB

Download