Analysis
- max time kernel
148s - max time network
161s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
- submitted
20/05/2024, 06:56
General
- Target 125/125.exe
- Size 18.3MB
- Sample240520-hqdlmsgf63
- SHA256 5a54cda9e42baea3defa9f1024858f7c44f79242b8765c9e886a8f54db6e1934
Malware Config
Signatures
- Suspicious use of WriteProcessMemory 6 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\125\125.exe"C:\Users\Admin\AppData\Local\Temp\125\125.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\125\Addons\bin\javaw.exe"C:\Users\Admin\AppData\Local\Temp\125\Addons\bin\javaw.exe" -version2⤵
-
-
C:\Users\Admin\AppData\Local\Temp\125\Addons\bin\javaw.exe"C:\Users\Admin\AppData\Local\Temp\125\Addons\bin\javaw.exe" -jar "C:\Users\Admin\AppData\Local\Temp\125\125.exe"2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
494c69267d587e5b.timestamp
memory/660-37-0x0000000000400000-0x000000000041E000-memory.dmp
memory/1568-111-0x00000000029F0000-0x00000000029F8000-memory.dmp
memory/1568-116-0x00000000029F8000-0x0000000002A00000-memory.dmp
memory/1568-50-0x0000000002940000-0x0000000002948000-memory.dmp
memory/1568-130-0x0000000002940000-0x0000000002948000-memory.dmp
memory/1568-131-0x0000000002988000-0x0000000002990000-memory.dmp
memory/1568-132-0x0000000002928000-0x0000000002930000-memory.dmp
memory/1568-133-0x0000000002990000-0x0000000002998000-memory.dmp
memory/1568-134-0x0000000002998000-0x00000000029A0000-memory.dmp
memory/1568-135-0x00000000029A0000-0x00000000029A8000-memory.dmp
memory/1568-70-0x0000000002930000-0x0000000002938000-memory.dmp
memory/1568-69-0x0000000002990000-0x0000000002998000-memory.dmp
memory/1568-68-0x0000000002928000-0x0000000002930000-memory.dmp
memory/1568-67-0x0000000002988000-0x0000000002990000-memory.dmp
memory/1568-72-0x0000000002998000-0x00000000029A0000-memory.dmp
memory/1568-74-0x00000000029A0000-0x00000000029A8000-memory.dmp
memory/1568-77-0x00000000029A8000-0x00000000029B0000-memory.dmp
memory/1568-79-0x00000000029B0000-0x00000000029B8000-memory.dmp
memory/1568-110-0x00000000029A0000-0x00000000029A8000-memory.dmp
memory/1568-81-0x00000000029B8000-0x00000000029C0000-memory.dmp
memory/1568-85-0x00000000029C0000-0x00000000029C8000-memory.dmp
memory/1568-88-0x00000000029C8000-0x00000000029D0000-memory.dmp
memory/1568-87-0x00000000028F0000-0x0000000002918000-memory.dmp
memory/1568-92-0x00000000029D0000-0x00000000029D8000-memory.dmp
memory/1568-91-0x0000000002938000-0x0000000002940000-memory.dmp
memory/1568-96-0x00000000029D8000-0x00000000029E0000-memory.dmp
memory/1568-95-0x0000000002940000-0x0000000002948000-memory.dmp
memory/1568-101-0x00000000029E0000-0x00000000029E8000-memory.dmp
memory/1568-100-0x0000000002990000-0x0000000002998000-memory.dmp
memory/1568-99-0x0000000002928000-0x0000000002930000-memory.dmp
memory/1568-98-0x0000000002988000-0x0000000002990000-memory.dmp
memory/1568-105-0x0000000002998000-0x00000000029A0000-memory.dmp
memory/1568-106-0x00000000029E8000-0x00000000029F0000-memory.dmp
memory/1568-47-0x0000000002938000-0x0000000002940000-memory.dmp
memory/1568-43-0x00000000028F0000-0x0000000002918000-memory.dmp
memory/1568-78-0x0000000000DC0000-0x0000000000DC1000-memory.dmp
memory/1568-115-0x00000000029A8000-0x00000000029B0000-memory.dmp
memory/1568-120-0x0000000002A00000-0x0000000002A08000-memory.dmp
memory/1568-119-0x00000000029B0000-0x00000000029B8000-memory.dmp
memory/1568-123-0x0000000002A08000-0x0000000002A10000-memory.dmp
memory/1568-122-0x00000000029B8000-0x00000000029C0000-memory.dmp
memory/1568-126-0x00000000029C0000-0x00000000029C8000-memory.dmp
memory/1568-127-0x0000000002A10000-0x0000000002A18000-memory.dmp
memory/1568-129-0x0000000002938000-0x0000000002940000-memory.dmp
memory/1568-142-0x00000000029D8000-0x00000000029E0000-memory.dmp
memory/1568-148-0x0000000002A08000-0x0000000002A10000-memory.dmp
memory/1568-147-0x0000000002A00000-0x0000000002A08000-memory.dmp
memory/1568-146-0x00000000029F8000-0x0000000002A00000-memory.dmp
memory/1568-145-0x00000000029F0000-0x00000000029F8000-memory.dmp
memory/1568-144-0x00000000029E8000-0x00000000029F0000-memory.dmp
memory/1568-143-0x00000000029E0000-0x00000000029E8000-memory.dmp
memory/1568-141-0x00000000029D0000-0x00000000029D8000-memory.dmp
memory/1568-140-0x00000000029C8000-0x00000000029D0000-memory.dmp
memory/1568-139-0x00000000029C0000-0x00000000029C8000-memory.dmp
memory/1568-138-0x00000000029B8000-0x00000000029C0000-memory.dmp
memory/1568-137-0x00000000029B0000-0x00000000029B8000-memory.dmp
memory/1568-136-0x00000000029A8000-0x00000000029B0000-memory.dmp
memory/1976-33-0x0000000002FD0000-0x0000000002FD8000-memory.dmp
memory/1976-30-0x0000000003030000-0x0000000003038000-memory.dmp
memory/1976-28-0x0000000001520000-0x0000000001521000-memory.dmp
memory/1976-12-0x0000000002FE0000-0x0000000002FE8000-memory.dmp
memory/1976-10-0x0000000002FD8000-0x0000000002FE0000-memory.dmp
memory/1976-2-0x0000000002F90000-0x0000000002FB8000-memory.dmp
memory/1976-32-0x0000000003028000-0x0000000003030000-memory.dmp
memory/1976-31-0x0000000002FC8000-0x0000000002FD0000-memory.dmp
memory/1976-36-0x0000000002FE0000-0x0000000002FE8000-memory.dmp
memory/1976-35-0x0000000002FD8000-0x0000000002FE0000-memory.dmp
memory/1976-34-0x0000000002F90000-0x0000000002FB8000-memory.dmp