Resubmissions
13/06/2024, 23:08
240613-24m7sayarl713/06/2024, 23:04
240613-22dkkavaka713/06/2024, 23:02
240613-2z9vzsthmh7Analysis
- max time kernel
287s - max time network
272s - platform
windows10-2004_x64 - resource
win10v2004-20240611-en - resource tags
- submitted
13/06/2024, 23:04
General
- Target meteor-client-0.5.0.jar
- Size 4.1MB
- Sample240613-22dkkavaka
- SHA256 528047bd3be7051a8d34316febd6903b30e0ef537fa26d5cc3dfed1ea24183ba
Malware Config
Signatures
- Modifies file permissions 1 TTPs 1 IoCs
- Suspicious use of SetWindowsHookEx 4 IoCs
- Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -jar C:\Users\Admin\AppData\Local\Temp\meteor-client-0.5.0.jar1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\icacls.exeC:\Windows\system32\icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant "everyone":(OI)(CI)M2⤵
- Modifies file permissions
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
3903daac9bc4a3b7.timestamp
memory/4276-2-0x000001ED37D50000-0x000001ED37FC0000-memory.dmp
memory/4276-18-0x000001ED36550000-0x000001ED36551000-memory.dmp
memory/4276-24-0x000001ED37FC0000-0x000001ED37FD0000-memory.dmp
memory/4276-27-0x000001ED37FD0000-0x000001ED37FE0000-memory.dmp
memory/4276-29-0x000001ED37FE0000-0x000001ED37FF0000-memory.dmp
memory/4276-31-0x000001ED37FF0000-0x000001ED38000000-memory.dmp
memory/4276-33-0x000001ED38000000-0x000001ED38010000-memory.dmp
memory/4276-35-0x000001ED38010000-0x000001ED38020000-memory.dmp
memory/4276-39-0x000001ED38020000-0x000001ED38030000-memory.dmp
memory/4276-42-0x000001ED37D50000-0x000001ED37FC0000-memory.dmp
memory/4276-43-0x000001ED38030000-0x000001ED38040000-memory.dmp
memory/4276-45-0x000001ED38040000-0x000001ED38050000-memory.dmp
memory/4276-48-0x000001ED38050000-0x000001ED38060000-memory.dmp
memory/4276-52-0x000001ED38060000-0x000001ED38070000-memory.dmp
memory/4276-51-0x000001ED37FC0000-0x000001ED37FD0000-memory.dmp
memory/4276-56-0x000001ED38070000-0x000001ED38080000-memory.dmp
memory/4276-55-0x000001ED37FD0000-0x000001ED37FE0000-memory.dmp
memory/4276-59-0x000001ED38080000-0x000001ED38090000-memory.dmp
memory/4276-58-0x000001ED37FE0000-0x000001ED37FF0000-memory.dmp
memory/4276-61-0x000001ED37FF0000-0x000001ED38000000-memory.dmp
memory/4276-62-0x000001ED38090000-0x000001ED380A0000-memory.dmp
memory/4276-65-0x000001ED38000000-0x000001ED38010000-memory.dmp
memory/4276-69-0x000001ED38010000-0x000001ED38020000-memory.dmp
memory/4276-70-0x000001ED380A0000-0x000001ED380B0000-memory.dmp
memory/4276-73-0x000001ED38020000-0x000001ED38030000-memory.dmp
memory/4276-74-0x000001ED380B0000-0x000001ED380C0000-memory.dmp
memory/4276-76-0x000001ED38030000-0x000001ED38040000-memory.dmp
memory/4276-77-0x000001ED380C0000-0x000001ED380D0000-memory.dmp
memory/4276-79-0x000001ED38040000-0x000001ED38050000-memory.dmp
memory/4276-80-0x000001ED380D0000-0x000001ED380E0000-memory.dmp
memory/4276-83-0x000001ED380E0000-0x000001ED380F0000-memory.dmp
memory/4276-82-0x000001ED38050000-0x000001ED38060000-memory.dmp
memory/4276-86-0x000001ED38060000-0x000001ED38070000-memory.dmp
memory/4276-89-0x000001ED380F0000-0x000001ED38100000-memory.dmp
memory/4276-88-0x000001ED38070000-0x000001ED38080000-memory.dmp
memory/4276-91-0x000001ED38080000-0x000001ED38090000-memory.dmp
memory/4276-94-0x000001ED38090000-0x000001ED380A0000-memory.dmp
memory/4276-95-0x000001ED38100000-0x000001ED38110000-memory.dmp
memory/4276-97-0x000001ED38110000-0x000001ED38120000-memory.dmp
memory/4276-101-0x000001ED380A0000-0x000001ED380B0000-memory.dmp
memory/4276-102-0x000001ED380B0000-0x000001ED380C0000-memory.dmp
memory/4276-103-0x000001ED380C0000-0x000001ED380D0000-memory.dmp
memory/4276-104-0x000001ED38120000-0x000001ED38130000-memory.dmp
memory/4276-107-0x000001ED380D0000-0x000001ED380E0000-memory.dmp
memory/4276-109-0x000001ED380E0000-0x000001ED380F0000-memory.dmp
memory/4276-110-0x000001ED38130000-0x000001ED38140000-memory.dmp
memory/4276-113-0x000001ED380F0000-0x000001ED38100000-memory.dmp
memory/4276-114-0x000001ED38100000-0x000001ED38110000-memory.dmp
memory/4276-117-0x000001ED38110000-0x000001ED38120000-memory.dmp
memory/4276-120-0x000001ED38120000-0x000001ED38130000-memory.dmp
memory/4276-124-0x000001ED38130000-0x000001ED38140000-memory.dmp
memory/4276-128-0x000001ED38140000-0x000001ED38150000-memory.dmp
memory/4276-137-0x000001ED38150000-0x000001ED38160000-memory.dmp
memory/4276-139-0x000001ED38140000-0x000001ED38150000-memory.dmp
memory/4276-142-0x000001ED38160000-0x000001ED38170000-memory.dmp
memory/4276-144-0x000001ED38150000-0x000001ED38160000-memory.dmp
memory/4276-149-0x000001ED38160000-0x000001ED38170000-memory.dmp
memory/4276-150-0x000001ED38170000-0x000001ED38180000-memory.dmp
memory/4276-153-0x000001ED38180000-0x000001ED38190000-memory.dmp
memory/4276-157-0x000001ED38190000-0x000001ED381A0000-memory.dmp
memory/4276-160-0x000001ED38170000-0x000001ED38180000-memory.dmp
memory/4276-162-0x000001ED381A0000-0x000001ED381B0000-memory.dmp
memory/4276-164-0x000001ED38180000-0x000001ED38190000-memory.dmp
memory/4276-166-0x000001ED38190000-0x000001ED381A0000-memory.dmp
memory/4276-170-0x000001ED381B0000-0x000001ED381C0000-memory.dmp
memory/4276-171-0x000001ED381B0000-0x000001ED381C0000-memory.dmp
memory/4276-175-0x000001ED381C0000-0x000001ED381D0000-memory.dmp
memory/4276-177-0x000001ED381D0000-0x000001ED381E0000-memory.dmp
memory/4276-180-0x000001ED381E0000-0x000001ED381F0000-memory.dmp
memory/4276-183-0x000001ED381F0000-0x000001ED38200000-memory.dmp
memory/4276-185-0x000001ED381C0000-0x000001ED381D0000-memory.dmp
memory/4276-186-0x000001ED381D0000-0x000001ED381E0000-memory.dmp
memory/4276-187-0x000001ED381E0000-0x000001ED381F0000-memory.dmp