Resubmissions
13/06/2024, 23:11
240613-26phmaybpj713/06/2024, 23:10
240613-253c4avbqd713/06/2024, 23:10
240613-25stnayblk7Analysis
- max time kernel
282s - max time network
256s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
- submitted
13/06/2024, 23:10
General
- Target meteor-client-0.5.6.jar
- Size 4.3MB
- Sample240613-25stnayblk
- SHA256 0058cfe2b24392bb6d84a7cbae10c66ecadfcef47b31e7fa5ad0e8f0b4f71c99
Malware Config
Signatures
- Modifies file permissions 1 TTPs 1 IoCs
- Suspicious use of SetWindowsHookEx 4 IoCs
- Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -jar C:\Users\Admin\AppData\Local\Temp\meteor-client-0.5.6.jar1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\icacls.exeC:\Windows\system32\icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant "everyone":(OI)(CI)M2⤵
- Modifies file permissions
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
3903daac9bc4a3b7.timestamp
memory/4968-2-0x000001CDEEC40000-0x000001CDEEEB0000-memory.dmp
memory/4968-18-0x000001CDEEC20000-0x000001CDEEC21000-memory.dmp
memory/4968-24-0x000001CDEEEB0000-0x000001CDEEEC0000-memory.dmp
memory/4968-27-0x000001CDEEEC0000-0x000001CDEEED0000-memory.dmp
memory/4968-29-0x000001CDEEED0000-0x000001CDEEEE0000-memory.dmp
memory/4968-31-0x000001CDEEEE0000-0x000001CDEEEF0000-memory.dmp
memory/4968-33-0x000001CDEEEF0000-0x000001CDEEF00000-memory.dmp
memory/4968-35-0x000001CDEEF00000-0x000001CDEEF10000-memory.dmp
memory/4968-39-0x000001CDEEF10000-0x000001CDEEF20000-memory.dmp
memory/4968-41-0x000001CDEEC40000-0x000001CDEEEB0000-memory.dmp
memory/4968-42-0x000001CDEEF20000-0x000001CDEEF30000-memory.dmp
memory/4968-45-0x000001CDEEF30000-0x000001CDEEF40000-memory.dmp
memory/4968-48-0x000001CDEEF40000-0x000001CDEEF50000-memory.dmp
memory/4968-51-0x000001CDEEEB0000-0x000001CDEEEC0000-memory.dmp
memory/4968-52-0x000001CDEEF50000-0x000001CDEEF60000-memory.dmp
memory/4968-56-0x000001CDEEF60000-0x000001CDEEF70000-memory.dmp
memory/4968-55-0x000001CDEEEC0000-0x000001CDEEED0000-memory.dmp
memory/4968-58-0x000001CDEEED0000-0x000001CDEEEE0000-memory.dmp
memory/4968-59-0x000001CDEEF70000-0x000001CDEEF80000-memory.dmp
memory/4968-61-0x000001CDEEEE0000-0x000001CDEEEF0000-memory.dmp
memory/4968-62-0x000001CDEEF80000-0x000001CDEEF90000-memory.dmp
memory/4968-64-0x000001CDEEEF0000-0x000001CDEEF00000-memory.dmp
memory/4968-67-0x000001CDEEF00000-0x000001CDEEF10000-memory.dmp
memory/4968-68-0x000001CDEEF90000-0x000001CDEEFA0000-memory.dmp
memory/4968-71-0x000001CDEEF10000-0x000001CDEEF20000-memory.dmp
memory/4968-72-0x000001CDEEFA0000-0x000001CDEEFB0000-memory.dmp
memory/4968-76-0x000001CDEEFB0000-0x000001CDEEFC0000-memory.dmp
memory/4968-75-0x000001CDEEF20000-0x000001CDEEF30000-memory.dmp
memory/4968-78-0x000001CDEEF30000-0x000001CDEEF40000-memory.dmp
memory/4968-79-0x000001CDEEFC0000-0x000001CDEEFD0000-memory.dmp
memory/4968-82-0x000001CDEEFD0000-0x000001CDEEFE0000-memory.dmp
memory/4968-81-0x000001CDEEF40000-0x000001CDEEF50000-memory.dmp
memory/4968-84-0x000001CDEEF50000-0x000001CDEEF60000-memory.dmp
memory/4968-85-0x000001CDEEFE0000-0x000001CDEEFF0000-memory.dmp
memory/4968-88-0x000001CDEEF60000-0x000001CDEEF70000-memory.dmp
memory/4968-91-0x000001CDEEF70000-0x000001CDEEF80000-memory.dmp
memory/4968-94-0x000001CDEEF80000-0x000001CDEEF90000-memory.dmp
memory/4968-95-0x000001CDEEFF0000-0x000001CDEF000000-memory.dmp
memory/4968-97-0x000001CDEF000000-0x000001CDEF010000-memory.dmp
memory/4968-99-0x000001CDEEF90000-0x000001CDEEFA0000-memory.dmp
memory/4968-100-0x000001CDEF010000-0x000001CDEF020000-memory.dmp
memory/4968-103-0x000001CDEEFA0000-0x000001CDEEFB0000-memory.dmp
memory/4968-105-0x000001CDEEFB0000-0x000001CDEEFC0000-memory.dmp
memory/4968-108-0x000001CDEEFC0000-0x000001CDEEFD0000-memory.dmp
memory/4968-110-0x000001CDEEFD0000-0x000001CDEEFE0000-memory.dmp
memory/4968-111-0x000001CDEEFE0000-0x000001CDEEFF0000-memory.dmp
memory/4968-112-0x000001CDEF020000-0x000001CDEF030000-memory.dmp
memory/4968-116-0x000001CDEEFF0000-0x000001CDEF000000-memory.dmp
memory/4968-119-0x000001CDEF000000-0x000001CDEF010000-memory.dmp
memory/4968-120-0x000001CDEF010000-0x000001CDEF020000-memory.dmp
memory/4968-128-0x000001CDEF020000-0x000001CDEF030000-memory.dmp
memory/4968-130-0x000001CDEF030000-0x000001CDEF040000-memory.dmp
memory/4968-138-0x000001CDEF040000-0x000001CDEF050000-memory.dmp
memory/4968-137-0x000001CDEF030000-0x000001CDEF040000-memory.dmp
memory/4968-144-0x000001CDEF050000-0x000001CDEF060000-memory.dmp
memory/4968-146-0x000001CDEF040000-0x000001CDEF050000-memory.dmp
memory/4968-149-0x000001CDEF060000-0x000001CDEF070000-memory.dmp
memory/4968-153-0x000001CDEF050000-0x000001CDEF060000-memory.dmp
memory/4968-157-0x000001CDEF070000-0x000001CDEF080000-memory.dmp
memory/4968-160-0x000001CDEF080000-0x000001CDEF090000-memory.dmp
memory/4968-165-0x000001CDEF060000-0x000001CDEF070000-memory.dmp
memory/4968-167-0x000001CDEF090000-0x000001CDEF0A0000-memory.dmp
memory/4968-172-0x000001CDEF070000-0x000001CDEF080000-memory.dmp
memory/4968-173-0x000001CDEF080000-0x000001CDEF090000-memory.dmp
memory/4968-174-0x000001CDEF0A0000-0x000001CDEF0B0000-memory.dmp
memory/4968-176-0x000001CDEF090000-0x000001CDEF0A0000-memory.dmp
memory/4968-177-0x000001CDEF0A0000-0x000001CDEF0B0000-memory.dmp
memory/4968-181-0x000001CDEF0B0000-0x000001CDEF0C0000-memory.dmp
memory/4968-182-0x000001CDEF0B0000-0x000001CDEF0C0000-memory.dmp
memory/4968-185-0x000001CDEF0C0000-0x000001CDEF0D0000-memory.dmp
memory/4968-189-0x000001CDEF0D0000-0x000001CDEF0E0000-memory.dmp
memory/4968-191-0x000001CDEF0E0000-0x000001CDEF0F0000-memory.dmp
memory/4968-195-0x000001CDEF0C0000-0x000001CDEF0D0000-memory.dmp
memory/4968-196-0x000001CDEF0D0000-0x000001CDEF0E0000-memory.dmp
memory/4968-197-0x000001CDEF0E0000-0x000001CDEF0F0000-memory.dmp