Analysis
- max time kernel
149s - max time network
53s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
- submitted
13/06/2024, 23:30
General
- Target meteor-client-0.5.6.jar
- Size 4.3MB
- Sample240613-3hgnjsvgnf
- SHA256 0058cfe2b24392bb6d84a7cbae10c66ecadfcef47b31e7fa5ad0e8f0b4f71c99
Malware Config
Signatures
- Modifies file permissions 1 TTPs 1 IoCs
- Suspicious use of SetWindowsHookEx 4 IoCs
- Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -jar C:\Users\Admin\AppData\Local\Temp\meteor-client-0.5.6.jar1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\icacls.exeC:\Windows\system32\icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant "everyone":(OI)(CI)M2⤵
- Modifies file permissions
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
3903daac9bc4a3b7.timestamp
memory/4836-2-0x00000274A9470000-0x00000274A96E0000-memory.dmp
memory/4836-18-0x00000274A7C10000-0x00000274A7C11000-memory.dmp
memory/4836-25-0x00000274A96E0000-0x00000274A96F0000-memory.dmp
memory/4836-27-0x00000274A96F0000-0x00000274A9700000-memory.dmp
memory/4836-30-0x00000274A9700000-0x00000274A9710000-memory.dmp
memory/4836-32-0x00000274A9710000-0x00000274A9720000-memory.dmp
memory/4836-34-0x00000274A9720000-0x00000274A9730000-memory.dmp
memory/4836-36-0x00000274A9730000-0x00000274A9740000-memory.dmp
memory/4836-40-0x00000274A9740000-0x00000274A9750000-memory.dmp
memory/4836-43-0x00000274A9470000-0x00000274A96E0000-memory.dmp
memory/4836-44-0x00000274A9750000-0x00000274A9760000-memory.dmp
memory/4836-46-0x00000274A9760000-0x00000274A9770000-memory.dmp
memory/4836-48-0x00000274A7C10000-0x00000274A7C11000-memory.dmp
memory/4836-50-0x00000274A9770000-0x00000274A9780000-memory.dmp
memory/4836-52-0x00000274A96E0000-0x00000274A96F0000-memory.dmp
memory/4836-53-0x00000274A9780000-0x00000274A9790000-memory.dmp
memory/4836-56-0x00000274A96F0000-0x00000274A9700000-memory.dmp
memory/4836-57-0x00000274A9790000-0x00000274A97A0000-memory.dmp
memory/4836-59-0x00000274A9700000-0x00000274A9710000-memory.dmp
memory/4836-60-0x00000274A97A0000-0x00000274A97B0000-memory.dmp
memory/4836-62-0x00000274A9710000-0x00000274A9720000-memory.dmp
memory/4836-66-0x00000274A97B0000-0x00000274A97C0000-memory.dmp
memory/4836-65-0x00000274A9720000-0x00000274A9730000-memory.dmp
memory/4836-70-0x00000274A9730000-0x00000274A9740000-memory.dmp
memory/4836-71-0x00000274A97C0000-0x00000274A97D0000-memory.dmp
memory/4836-73-0x00000274A9740000-0x00000274A9750000-memory.dmp
memory/4836-74-0x00000274A97D0000-0x00000274A97E0000-memory.dmp
memory/4836-77-0x00000274A97E0000-0x00000274A97F0000-memory.dmp
memory/4836-76-0x00000274A9750000-0x00000274A9760000-memory.dmp
memory/4836-80-0x00000274A97F0000-0x00000274A9800000-memory.dmp
memory/4836-79-0x00000274A9760000-0x00000274A9770000-memory.dmp
memory/4836-82-0x00000274A9770000-0x00000274A9780000-memory.dmp
memory/4836-83-0x00000274A9800000-0x00000274A9810000-memory.dmp
memory/4836-86-0x00000274A9780000-0x00000274A9790000-memory.dmp
memory/4836-89-0x00000274A9790000-0x00000274A97A0000-memory.dmp
memory/4836-92-0x00000274A97A0000-0x00000274A97B0000-memory.dmp
memory/4836-93-0x00000274A9810000-0x00000274A9820000-memory.dmp
memory/4836-95-0x00000274A9820000-0x00000274A9830000-memory.dmp
memory/4836-97-0x00000274A97B0000-0x00000274A97C0000-memory.dmp
memory/4836-98-0x00000274A9830000-0x00000274A9840000-memory.dmp
memory/4836-101-0x00000274A97C0000-0x00000274A97D0000-memory.dmp
memory/4836-104-0x00000274A97D0000-0x00000274A97E0000-memory.dmp
memory/4836-106-0x00000274A9840000-0x00000274A9850000-memory.dmp
memory/4836-105-0x00000274A97E0000-0x00000274A97F0000-memory.dmp
memory/4836-109-0x00000274A97F0000-0x00000274A9800000-memory.dmp
memory/4836-110-0x00000274A9800000-0x00000274A9810000-memory.dmp
memory/4836-112-0x00000274A9850000-0x00000274A9860000-memory.dmp
memory/4836-114-0x00000274A9810000-0x00000274A9820000-memory.dmp
memory/4836-116-0x00000274A9820000-0x00000274A9830000-memory.dmp
memory/4836-118-0x00000274A9830000-0x00000274A9840000-memory.dmp
memory/4836-121-0x00000274A9840000-0x00000274A9850000-memory.dmp
memory/4836-126-0x00000274A9850000-0x00000274A9860000-memory.dmp
memory/4836-131-0x00000274A9860000-0x00000274A9870000-memory.dmp
memory/4836-139-0x00000274A9860000-0x00000274A9870000-memory.dmp
memory/4836-143-0x00000274A9870000-0x00000274A9880000-memory.dmp
memory/4836-147-0x00000274A9880000-0x00000274A9890000-memory.dmp
memory/4836-150-0x00000274A9870000-0x00000274A9880000-memory.dmp
memory/4836-155-0x00000274A9890000-0x00000274A98A0000-memory.dmp
memory/4836-157-0x00000274A98A0000-0x00000274A98B0000-memory.dmp
memory/4836-161-0x00000274A9880000-0x00000274A9890000-memory.dmp
memory/4836-163-0x00000274A98B0000-0x00000274A98C0000-memory.dmp
memory/4836-168-0x00000274A9890000-0x00000274A98A0000-memory.dmp
memory/4836-169-0x00000274A98A0000-0x00000274A98B0000-memory.dmp