Analysis
- max time kernel
44s - max time network
45s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
- submitted
20/06/2024, 18:46
General
- Target SKlauncher-3.2.8.jar
- Size 1.1MB
- Sample240620-xetwtascpg
- SHA256 4bc59dacfa6a02b5e825ccb4d545e6749393b30783459637c5075a6c2b60bc68
Malware Config
Signatures
- Loads dropped DLL 1 IoCs
- Modifies file permissions 1 TTPs 1 IoCs
- Legitimate hosting services abused for malware hosting/C2 1 TTPs 1 IoCs
- Suspicious use of SetWindowsHookEx 4 IoCs
- Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -jar C:\Users\Admin\AppData\Local\Temp\SKlauncher-3.2.8.jar1⤵
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\icacls.exeC:\Windows\system32\icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant "everyone":(OI)(CI)M2⤵
- Modifies file permissions
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
3903daac9bc4a3b7.timestamp
flatlaf-windows-x86_64-4561548297900.dll
memory/4908-2-0x000002A44B430000-0x000002A44B6A0000-memory.dmp
memory/4908-15-0x000002A44B410000-0x000002A44B411000-memory.dmp
memory/4908-23-0x000002A44B6A0000-0x000002A44B6B0000-memory.dmp
memory/4908-27-0x000002A44B6B0000-0x000002A44B6C0000-memory.dmp
memory/4908-35-0x000002A44B6C0000-0x000002A44B6D0000-memory.dmp
memory/4908-40-0x000002A44B6D0000-0x000002A44B6E0000-memory.dmp
memory/4908-43-0x000002A44B6E0000-0x000002A44B6F0000-memory.dmp
memory/4908-46-0x000002A44B6F0000-0x000002A44B700000-memory.dmp
memory/4908-50-0x000002A44B700000-0x000002A44B710000-memory.dmp
memory/4908-53-0x000002A44B710000-0x000002A44B720000-memory.dmp
memory/4908-54-0x000002A44B720000-0x000002A44B730000-memory.dmp
memory/4908-62-0x000002A44B6A0000-0x000002A44B6B0000-memory.dmp
memory/4908-61-0x000002A44B740000-0x000002A44B750000-memory.dmp
memory/4908-60-0x000002A44B730000-0x000002A44B740000-memory.dmp
memory/4908-59-0x000002A44B430000-0x000002A44B6A0000-memory.dmp
memory/4908-56-0x000002A44B410000-0x000002A44B411000-memory.dmp
memory/4908-65-0x000002A44B750000-0x000002A44B760000-memory.dmp
memory/4908-64-0x000002A44B6B0000-0x000002A44B6C0000-memory.dmp
memory/4908-69-0x000002A44B6C0000-0x000002A44B6D0000-memory.dmp
memory/4908-72-0x000002A44B780000-0x000002A44B790000-memory.dmp
memory/4908-71-0x000002A44B770000-0x000002A44B780000-memory.dmp
memory/4908-70-0x000002A44B760000-0x000002A44B770000-memory.dmp
memory/4908-75-0x000002A44B790000-0x000002A44B7A0000-memory.dmp
memory/4908-74-0x000002A44B6D0000-0x000002A44B6E0000-memory.dmp
memory/4908-80-0x000002A44B7B0000-0x000002A44B7C0000-memory.dmp
memory/4908-79-0x000002A44B7A0000-0x000002A44B7B0000-memory.dmp
memory/4908-78-0x000002A44B6E0000-0x000002A44B6F0000-memory.dmp
memory/4908-86-0x000002A44B7D0000-0x000002A44B7E0000-memory.dmp
memory/4908-84-0x000002A44B7C0000-0x000002A44B7D0000-memory.dmp
memory/4908-83-0x000002A44B6F0000-0x000002A44B700000-memory.dmp
memory/4908-92-0x000002A44B7F0000-0x000002A44B800000-memory.dmp
memory/4908-93-0x000002A44B800000-0x000002A44B810000-memory.dmp
memory/4908-95-0x000002A44B810000-0x000002A44B820000-memory.dmp
memory/4908-91-0x000002A44B7E0000-0x000002A44B7F0000-memory.dmp
memory/4908-89-0x000002A44B700000-0x000002A44B710000-memory.dmp
memory/4908-90-0x000002A44B710000-0x000002A44B720000-memory.dmp
memory/4908-98-0x000002A44B820000-0x000002A44B830000-memory.dmp
memory/4908-97-0x000002A44B720000-0x000002A44B730000-memory.dmp
memory/4908-103-0x000002A44B840000-0x000002A44B850000-memory.dmp
memory/4908-102-0x000002A44B830000-0x000002A44B840000-memory.dmp
memory/4908-101-0x000002A44B730000-0x000002A44B740000-memory.dmp
memory/4908-108-0x000002A44B860000-0x000002A44B870000-memory.dmp
memory/4908-107-0x000002A44B850000-0x000002A44B860000-memory.dmp
memory/4908-106-0x000002A44B740000-0x000002A44B750000-memory.dmp
memory/4908-114-0x000002A44B880000-0x000002A44B890000-memory.dmp
memory/4908-113-0x000002A44B870000-0x000002A44B880000-memory.dmp
memory/4908-111-0x000002A44B750000-0x000002A44B760000-memory.dmp
memory/4908-116-0x000002A44B760000-0x000002A44B770000-memory.dmp
memory/4908-120-0x000002A44B8A0000-0x000002A44B8B0000-memory.dmp
memory/4908-119-0x000002A44B890000-0x000002A44B8A0000-memory.dmp
memory/4908-118-0x000002A44B780000-0x000002A44B790000-memory.dmp
memory/4908-117-0x000002A44B770000-0x000002A44B780000-memory.dmp
memory/4908-122-0x000002A44B790000-0x000002A44B7A0000-memory.dmp
memory/4908-123-0x000002A44B8B0000-0x000002A44B8C0000-memory.dmp
memory/4908-125-0x000002A44B7A0000-0x000002A44B7B0000-memory.dmp
memory/4908-126-0x000002A44B7B0000-0x000002A44B7C0000-memory.dmp
memory/4908-127-0x000002A44B8C0000-0x000002A44B8D0000-memory.dmp
memory/4908-129-0x000002A44B7C0000-0x000002A44B7D0000-memory.dmp
memory/4908-131-0x000002A44B8D0000-0x000002A44B8E0000-memory.dmp
memory/4908-130-0x000002A44B7D0000-0x000002A44B7E0000-memory.dmp
memory/4908-132-0x000002A44B410000-0x000002A44B411000-memory.dmp
memory/4908-134-0x000002A44B7E0000-0x000002A44B7F0000-memory.dmp
memory/4908-137-0x000002A44B8E0000-0x000002A44B8F0000-memory.dmp
memory/4908-136-0x000002A44B800000-0x000002A44B810000-memory.dmp
memory/4908-135-0x000002A44B7F0000-0x000002A44B800000-memory.dmp
memory/4908-139-0x000002A44B810000-0x000002A44B820000-memory.dmp
memory/4908-140-0x000002A44B8F0000-0x000002A44B900000-memory.dmp
memory/4908-142-0x000002A44B820000-0x000002A44B830000-memory.dmp
memory/4908-143-0x000002A44B900000-0x000002A44B910000-memory.dmp
memory/4908-145-0x000002A44B830000-0x000002A44B840000-memory.dmp
memory/4908-146-0x000002A44B840000-0x000002A44B850000-memory.dmp
memory/4908-147-0x000002A44B910000-0x000002A44B920000-memory.dmp
memory/4908-149-0x000002A44B850000-0x000002A44B860000-memory.dmp
memory/4908-150-0x000002A44B860000-0x000002A44B870000-memory.dmp
memory/4908-151-0x000002A44B920000-0x000002A44B930000-memory.dmp
memory/4908-154-0x000002A44B870000-0x000002A44B880000-memory.dmp
memory/4908-156-0x000002A44B930000-0x000002A44B940000-memory.dmp
memory/4908-155-0x000002A44B880000-0x000002A44B890000-memory.dmp
memory/4908-158-0x000002A44B8A0000-0x000002A44B8B0000-memory.dmp
memory/4908-159-0x000002A44B940000-0x000002A44B950000-memory.dmp
memory/4908-161-0x000002A44B8B0000-0x000002A44B8C0000-memory.dmp
memory/4908-162-0x000002A44B950000-0x000002A44B960000-memory.dmp
memory/4908-165-0x000002A44B8C0000-0x000002A44B8D0000-memory.dmp
memory/4908-166-0x000002A44B960000-0x000002A44B970000-memory.dmp
memory/4908-168-0x000002A44B8D0000-0x000002A44B8E0000-memory.dmp
memory/4908-169-0x000002A44B970000-0x000002A44B980000-memory.dmp
memory/4908-171-0x000002A44B8E0000-0x000002A44B8F0000-memory.dmp
memory/4908-172-0x000002A44B980000-0x000002A44B990000-memory.dmp
memory/4908-174-0x000002A44B8F0000-0x000002A44B900000-memory.dmp
memory/4908-175-0x000002A44B990000-0x000002A44B9A0000-memory.dmp
memory/4908-178-0x000002A44B900000-0x000002A44B910000-memory.dmp
memory/4908-179-0x000002A44B9A0000-0x000002A44B9B0000-memory.dmp
memory/4908-181-0x000002A44B910000-0x000002A44B920000-memory.dmp
memory/4908-182-0x000002A44B9B0000-0x000002A44B9C0000-memory.dmp
memory/4908-184-0x000002A44B920000-0x000002A44B930000-memory.dmp
memory/4908-185-0x000002A44B9C0000-0x000002A44B9D0000-memory.dmp
memory/4908-189-0x000002A44B9D0000-0x000002A44B9E0000-memory.dmp
memory/4908-188-0x000002A44B930000-0x000002A44B940000-memory.dmp
memory/4908-192-0x000002A44B940000-0x000002A44B950000-memory.dmp
memory/4908-247-0x000002A44B410000-0x000002A44B411000-memory.dmp