1ab7b5aa280179b9f9550489c61512cbfd23219d31bbcbc9955340573323fd2e

Analysis

max time kernel
146s
max time network
123s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
23-05-2024 05:07

Target

SS Tool [Extract]/Applications/Xray Pack Test.jar
Size

4KB
MD5

650a98101c915979caaefff531ccc684
SHA1

946be0460303245dfb1d6ffefa8e25b5ca18bd03
SHA256

0733304d982e64612ed2162299f4c8ae7a8a45072fbe98d998e641d7c24208c3
SHA512

a1e5f75126298a20a6be1ca6a455861f60ca48ecfc1d54d1c3799d7382ef97c38924d822b8f99844b59f4479d4b794daa9cfa6371a396e42cb5e4031cb8e26c4
SSDEEP

96:t2nvgzcmy5lhohAgN9SMQBJVLrIYXSTpUOv+BX92k1vvJ6wbb/ia:t2nYgmy5lhohAUSXVLrI3dU/+Uvx6wbl

Score

1^/10

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

java.exe

pid process

1012 java.exe
1012 java.exe
1012 java.exe
1012 java.exe

C:\Windows\system32\java.exe
java -jar "C:\Users\Admin\AppData\Local\Temp\SS Tool [Extract]\Applications\Xray Pack Test.jar"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1012

memory/1012-2-0x0000000002480000-0x00000000026F0000-memory.dmp

Filesize
2.4MB

Download
memory/1012-15-0x00000000003B0000-0x00000000003BA000-memory.dmp

Filesize
40KB

Download
memory/1012-14-0x00000000003B0000-0x00000000003BA000-memory.dmp

Filesize
40KB

Download
memory/1012-18-0x0000000000340000-0x0000000000341000-memory.dmp

Filesize
4KB

Download
memory/1012-19-0x0000000002480000-0x00000000026F0000-memory.dmp

Filesize
2.4MB

Download
memory/1012-20-0x00000000003B0000-0x00000000003BA000-memory.dmp

Filesize
40KB

Download
memory/1012-21-0x00000000003B0000-0x00000000003BA000-memory.dmp

Filesize
40KB

Download