ed4b6b486bb45221794589d10ea0fb4b1352ae54b0426b268e29c5bbbbf144bc

Analysis

max time kernel
445s
max time network
439s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
11/07/2024, 15:24

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

LegacyLauncher_mcl.jar
Size

9.2MB
MD5

3ccd97385f6dba2f4dc0f604d572d997
SHA1

e8a4fa42cefb2cbfb0e5e2e08d81d3fd8fbe91b9
SHA256

ed4b6b486bb45221794589d10ea0fb4b1352ae54b0426b268e29c5bbbbf144bc
SHA512

d74766f53c99470a56c4fc994ba5aab4eacbdd2a55bd79a56e66d0a415dc4a8abe47b9b933b8b27f92666bce2bf9588c6c0fae6f44bb4d1e6e8d6cb936b9aff2
SSDEEP

196608:wbSdSZ9fzJ+vzQWTvG5RORTW5mcqyd+Tt9t4q:wKS+TqRZ2yd+h0q

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 2 IoCs

pid	Process
3724	java.exe
3724	java.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\	java.exe
Key created	\REGISTRY\USER\S-1-5-21-2650514177-1034912467-4025611726-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	java.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3724	java.exe
3724	java.exe

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 920 wrote to memory of 3724	920	java.exe	87
PID 920 wrote to memory of 3724	920	java.exe	87

C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
java -jar C:\Users\Admin\AppData\Local\Temp\LegacyLauncher_mcl.jar
1⤵
- Suspicious use of WriteProcessMemory
PID:920
- C:\Program Files\Java\jre-1.8\bin\java.exe
  "C:\Program Files\Java\jre-1.8\bin\java.exe" -Xmx128m -Dfile.encoding=UTF-8 -Dtlauncher.systemCharset=windows-1252 -Dtlauncher.logFolder=C:\Users\Admin\AppData\Roaming\.tlauncher\logs -classpath C:\Users\Admin\AppData\Local\Temp\LegacyLauncher_mcl.jar ru.turikhay.tlauncher.bootstrap.Bootstrap
  2⤵
  - Loads dropped DLL
  - Modifies registry class
  - Suspicious use of SetWindowsHookEx
  PID:3724

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\flatlaf.temp\flatlaf-windows-x86_64-4795512740900.dll

Filesize
9KB

MD5
697d496ac9f5aaab8ae025322358c61e

SHA1
2043eac8cdcc2e24b854af1eacd77a5f2a395a27

SHA256
a7273a4cf48ab3413f2c186cc95a3367a73ce99f8d45329383219d4cc27003aa

SHA512
b6702cd49a3af9f97f697565136f140692af9f8b271e672f2e91c920a23212b778583786f2377078117113647926338614a92c4a2423318b7a21ba2fe3a89838

Download Submit
C:\Users\Admin\AppData\Local\Temp\jna-63116079\jna6591914030074105997.dll

Filesize
248KB

MD5
34d12b1e2af72d9bb267bbc8c0d53e4a

SHA1
d9ed8776645f6b4f52df16132450863c47ea92d7

SHA256
13b2cac3f50368ab97fa2e3b0d0d2cb612f68449d5bbd6de187fc85ee4469d03

SHA512
c0a063477cf63a8b647ea721842968b506d70ea22c586a412707d7293b46c218b6a510f34b7dbedd3ed29a9d4b5dc5c6a1995403d65884b17348a9545e580a10

Download Submit
C:\Users\Admin\AppData\Local\Temp\tlauncher1843354116249072248.tmp

Filesize
1KB

MD5
a859b4eb0e965ce8b7206b83aa051013

SHA1
a28cd5a4a3d1d006060e7c851dba59ff5ea6d249

SHA256
3b91f9627f55f3e24974ddeeb039b08f634d1481c98f14016d0bd50d0f97bb56

SHA512
8b48fe49a644e8f4bfb555444e7339683a3889af2cdd842d77fc99acf16e9f30312a30448ea37c2f7244ada60714b86615fc3f5448af754fa927a39873efacca

Download Submit
C:\Users\Admin\AppData\Local\Temp\tlauncher429119274523760590.tmp

Filesize
113KB

MD5
57c2fbfeb55e307ccae52e5322082e02

SHA1
1ea4bec1a921180164852c65006d928617bd2caf

SHA256
211b306cfc44f8f96df3a0a3ddaf75ba8c5289eed77d60d72f889bb855f535e5

SHA512
a4362db234d4e83683e90f5baf90c82107450cc4404acab96e3fab14b8a3d4588a19722171d32f27d18463682a6994cad9af0b1065c954e3a77ea7bdcf586bac

Download Submit
C:\Users\Admin\AppData\Local\Temp\tlauncher5596589003358024398.tmp

Filesize
5.2MB

MD5
f812f865d135d63000318b09943956dd

SHA1
545ec21f03a6e026981bd8ce889cb54c769c0231

SHA256
61d722a822031a2ba72599c6b8b20ff9a0ab502bb043f0ba531fee35839b0bfe

SHA512
61e5ac0366c3c14497e2e9ad253b522c7cb6280e9d03fbd0bf49a2de4706d719140b98486835167b7b252f40e0cc44acefc37d757520a0325b65b21ff003fc33

Download Submit
C:\Users\Admin\AppData\Local\Temp\tlauncher6483621227104056759.tmp

Filesize
203KB

MD5
ab1ae0e2f2f63601597a5a96fca8a54f

SHA1
d5692f0526415fcc6de94bb5bfbd3afd9dd3b3e5

SHA256
ff10785ac2a357ec5de9c293cb982a2cbb605c0309ea4cc1cb9b9bc6dbe7f3cb

SHA512
ff20c424e130c31c30b4f4f5b4374f8f98f94ddae2b123f3c213f147be6b3de57854ee5651b02dd97d352c1c1df2a8bfeef73d5307a71372f46a6002eab24d78

Download Submit
C:\Users\Admin\AppData\Local\Temp\tlauncher954930418501459950.tmp

Filesize
4KB

MD5
091883993ef5bfa91da01dcc8fc52236

SHA1
1dcf1de382a0bf95a3d8b0849546c88bac1292c9

SHA256
a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26

SHA512
f8d59b808d6ba617252305b66d5590937da9b2b843d492d06b8d0b1b1f397e39f360d5817707797b979a5bf20bf21987b35333e7a15c44ed7401fea2d2119cae

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\bin\lib\com\fasterxml\jackson\core\jackson-core\2.13.0\jackson-core-2.13.0.jar

Filesize
365KB

MD5
94e04abccab99e295a3f4f57f6e387c8

SHA1
e957ec5442966e69cef543927bdc80e5426968bb

SHA256
348bc59b348df2e807b356f1d62d2afb41a974073328abc773eb0932b855d2c8

SHA512
8a340c9ce19fcf159fc321ff7bf7491b8d60348b472ad4af2bd6e71ef47f1b485afac4d71e734ab6bbf60541a62254ece3f7b12eedd68a88a6623837743d4bd1

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\bin\lib\com\github\zafarkhaja\java-semver\0.9.0\java-semver-0.9.0.jar

Filesize
45KB

MD5
9417096ff6a9db74db273abbda0f334e

SHA1
59a83ca73c72a5e25b3f0b1bb305230a11000329

SHA256
2218c73b40f9af98b570d084420c1b4a81332297bd7fc27ddd552e903be8e93c

SHA512
df4eedad13cc2f2c97f1778ef1319eea2a0f763fb20dbea573732ca1f029701cc6aa9fe415ec785e517e49abece5a09ba6f72f87abb5133741accc9456de9d3b

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\bin\lib\com\google\code\findbugs\jsr305\3.0.2\jsr305-3.0.2.jar

Filesize
19KB

MD5
dd83accb899363c32b07d7a1b2e4ce40

SHA1
25ea2e8b0c338a877313bd4672d3fe056ea78f0d

SHA256
766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7

SHA512
bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\bin\lib\com\google\code\gson\gson\2.8.9\gson-2.8.9.jar

Filesize
252KB

MD5
e67627f67e03301092dc7de0a2d7cef8

SHA1
8a432c1d6825781e21a02db2e2c33c5fde2833b9

SHA256
d3999291855de495c94c743761b8ab5176cfeabe281a5ab0d8e8d45326fd703e

SHA512
46501e4dd34c9a6f33ff63aeeec45b049579365c5273490e5dfd5ea4effaeced907d0fc728204c619aa136e867ad826204582ff9ba3080d06693c1c675c8473f

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\bin\lib\com\google\errorprone\error_prone_annotations\2.7.1\error_prone_annotations-2.7.1.jar

Filesize
14KB

MD5
5260e1257140bed1936991931cff5ed8

SHA1
458d9042f7aa6fa9a634df902b37f544e15aacac

SHA256
cd5257c08a246cf8628817ae71cb822be192ef91f6881ca4a3fcff4f1de1cff3

SHA512
32747ed9abb289da6ec8f3acb3a3be47c1271323847c8e3c1e9f58e9fc4a211221bdaf988990e8ec97bdba3986927ec81cf9d3f3b5939fff8cbdfb0ec7afc7fe

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\bin\lib\com\google\guava\guava\31.0.1-jre\guava-31.0.1-jre.jar

Filesize
2.8MB

MD5
bb811ca86cba6506cca5d415cd5559a7

SHA1
119ea2b2bc205b138974d351777b20f02b92704b

SHA256
d5be94d65e87bd219fb3193ad1517baa55a3b88fc91d21cf735826ab5af087b9

SHA512
c8d8aa38e6fb04c409c37922efcbbe182f65156a853f691d8381d56eea208adf22f7a28873bb7895210e41857dd4411aaf952682a2692051220e281910d0798f

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\bin\lib\com\google\guava\listenablefuture\9999.0-empty-to-avoid-conflict-with-guava\listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar

Filesize
2KB

MD5
d094c22570d65e132c19cea5d352e381

SHA1
b421526c5f297295adef1c886e5246c39d4ac629

SHA256
b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99

SHA512
c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\bin\lib\com\google\j2objc\j2objc-annotations\1.3\j2objc-annotations-1.3.jar

Filesize
8KB

MD5
5fa4ec4ec0c5aa70af8a7d4922df1931

SHA1
ba035118bc8bac37d7eff77700720999acd9986d

SHA256
21af30c92267bd6122c0e0b4d20cccb6641a37eaf956c6540ec471d584e64a7b

SHA512
51ea975179f809cb260751d11a513881b643bf016d15949bcb63b57d3c8868a2197e0620ccbaa5739e032797ec6faa3aa6d64606e999fce32930314780ca4115

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\bin\lib\com\moandjiezana\toml\toml4j\0.7.2\toml4j-0.7.2.jar

Filesize
61KB

MD5
efaec2fac998dce5bc118362bf724527

SHA1
0a03337911d0bd2c40932aca3946edb30d0e7d0c

SHA256
f5475e63e7e89e5db62223489aec7a56bd303543772077a17c2cb54c19ca3a20

SHA512
1bad58ed98f667e853c4c96b89222a7b959249193f307a5a0f3f472d4b7e965b52e47d1f1deb1f4c639737a1d977ca694517a2d84eb6f09608d3a3ad8fae5860

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\bin\lib\com\mojang\authlib\1.5.24\authlib-1.5.24.jar

Filesize
62KB

MD5
efc895d2814188a4612e1afa144bc1bf

SHA1
0889ff5477b844800cff734babbf42c1bbda4b10

SHA256
795f783dc6301d10e356d1f3db9952d71692ed8004ffdd843f0049f813a0d1a5

SHA512
8cf754e1cb04aee3e4f334e97a5e4a0ee71baa0764eb568d95f11ce89b3ba43bee713be8db772c1032ae8de5f90384936f8ca2e6bffc5490ae1b2e90dd2a0646

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\bin\lib\com\timgroup\java-statsd-client\3.1.0\java-statsd-client-3.1.0.jar

Filesize
9KB

MD5
e4ace4af9c2fc50f4eb317c83a7496a6

SHA1
aa2f429cc8d30da2970019297aab87898b344542

SHA256
bbb82aadb5e4209527c15fcc40e514b6f4c921a37bc66b68b3611bec70c538e8

SHA512
31963579cab08357d651841b6b6c9e6b73b6330048b3986b0c0b2686be54b11a5af2a0764615c0f55c0d060df4114973b82b3f11ecf3d892271f4fe855c99d29

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\bin\lib\commons-codec\commons-codec\1.11\commons-codec-1.11.jar

Filesize
327KB

MD5
567159b1ae257a43e1391a8f59d24cfe

SHA1
3acb4705652e16236558f0f4f2192cc33c3bd189

SHA256
e599d5318e97aa48f42136a2927e6dfa4e8881dff0e6c8e3109ddbbff51d7b7d

SHA512
d9586162b257386b5871e7e9ae255a38014a9efaeef5148de5e40a3b0200364dad8516bddd554352aa2e5337bec2cc11df88c76c4fdde96a40f3421aa60650d7

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\bin\lib\commons-io\commons-io\2.11.0\commons-io-2.11.0.jar

Filesize
319KB

MD5
3b4b7ccfaeceeac240b804839ee1a1ca

SHA1
a2503f302b11ebde7ebc3df41daebe0e4eea3689

SHA256
961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908

SHA512
5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\bin\lib\commons-logging\commons-logging\1.2\commons-logging-1.2.jar

Filesize
60KB

MD5
040b4b4d8eac886f6b4a2a3bd2f31b00

SHA1
4bfc12adfe4842bf07b657f0369c4cb522955686

SHA256
daddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636

SHA512
ed00dbfabd9ae00efa26dd400983601d076fe36408b7d6520084b447e5d1fa527ce65bd6afdcb58506c3a808323d28e88f26cb99c6f5db9ff64f6525ecdfa557

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\bin\lib\io\sentry\sentry\1.7.30\sentry-1.7.30.jar

Filesize
176KB

MD5
c3a628052fde00eaf08efa393c87b414

SHA1
e0bc8a2462727d45d6cf506f522218edb6d09452

SHA256
ede7def7507a24e74b501f80ba0cfb82eb5e5745cb493d3ee5720a385bfde1f1

SHA512
64ab0c8062f0328592c93b129e3439ba13b7535ef4ac8e4882affa7af006434b4da1450a39fc50286fe5889b50a5239de2a3efa3b1befc8361eeed3ff685002c

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\bin\lib\me\cortex\jarscanner\1.1\jarscanner-1.1.jar

Filesize
185KB

MD5
e088a60e321fd16843f743d202f2269e

SHA1
4054c9c743d0f66db08fd001c224e5e646d1748e

SHA256
ef63a068302ff795b19b22ba4d105d35f753bf621230c3bf5077e9ee1cc834ba

SHA512
6b6972f69f24ad12a87acf087928eb6cf76dc6f60e1d16669f21dd214ed1cca63a604db6b2d4b32f9da0f0c148b0bb66a78e97121008555200bd976f7e32a312

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\bin\lib\net\sf\jopt-simple\jopt-simple\5.0.4\jopt-simple-5.0.4.jar

Filesize
76KB

MD5
eb0d9dffe9b0eddead68fe678be76c49

SHA1
4fdac2fbe92dfad86aa6e9301736f6b4342a3f5c

SHA256
df26cc58f235f477db07f753ba5a3ab243ebe5789d9f89ecf68dd62ea9a66c28

SHA512
cbc27e0b6da6ae4b6245353d6626d2e3c171c3026a555fa21e8ef61b30714e286db85086d1a57c167016e8a7f07be2a243e34b3ab504b1877806f3bcec5df986

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\bin\lib\org\apache\commons\commons-compress\1.21\commons-compress-1.21.jar

Filesize
994KB

MD5
2a713d10331bc4e13459a3dc0463f16f

SHA1
4ec95b60d4e86b5c95a0e919cb172a0af98011ef

SHA256
6aecfd5459728a595601cfa07258d131972ffc39b492eb48bdd596577a2f244a

SHA512
c92d9a12547aab475e057955ad815fdfe92ff44c78383fa5af54b089f1bff5525126ef6aef93334f3bfc22e2fef4ad0d969f69384e978a83a55f011a53e7e471

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\bin\lib\org\apache\commons\commons-lang3\3.12.0\commons-lang3-3.12.0.jar

Filesize
573KB

MD5
19fe50567358922bdad277959ea69545

SHA1
c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e

SHA256
d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e

SHA512
fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\bin\lib\org\apache\httpcomponents\fluent-hc\4.5.13\fluent-hc-4.5.13.jar

Filesize
30KB

MD5
8f7e4f1a95a870ebee87ddacc425362c

SHA1
300bf1846737e34b9ea10faae257ca8fdcd0616f

SHA256
f883b6b027d5e05c53e48e4fe3548715c52dbd590ffa3f52d039574f1a4d0728

SHA512
98e30ed27d6ac078450efe5e236117445c93e05eb280399e056816c52643a3a33adce5e3a885ce8488186f38d05e0fb6c65dfcbaa509be8c6047ef2f0870d9b0

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\bin\lib\org\apache\httpcomponents\httpclient\4.5.13\httpclient-4.5.13.jar

Filesize
762KB

MD5
40d6b9075fbd28fa10292a45a0db9457

SHA1
e5f6cae5ca7ecaac1ec2827a9e2d65ae2869cada

SHA256
6fe9026a566c6a5001608cf3fc32196641f6c1e5e1986d1037ccdbd5f31ef743

SHA512
3567739186e551f84cad3e4b6b270c5b8b19aba297675a96bcdff3663ff7d20d188611d21f675fe5ff1bfd7d8ca31362070910d7b92ab1b699872a120aa6f089

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\bin\lib\org\apache\httpcomponents\httpcore\4.4.13\httpcore-4.4.13.jar

Filesize
320KB

MD5
e07a248f61c52776a2366c075dcd4963

SHA1
853b96d3afbb7bf8cc303fe27ee96836a10c1834

SHA256
e06e89d40943245fcfa39ec537cdbfce3762aecde8f9c597780d2b00c2b43424

SHA512
23430cde8b9bed33c91474ba49f1143284135df1b25fdcbc37bc3bb7e9549e77b3918eb40250093db652ae200367e87316129b23b4f6987e94939d60f467498d

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\bin\lib\org\apache\logging\log4j\log4j-1.2-api\2.19.0\log4j-1.2-api-2.19.0.jar

Filesize
340KB

MD5
64330e674f83b296d3bd63f0f71206fb

SHA1
0e8d839e89e44f06ed901bb8b681161ad3131fd5

SHA256
60480a6c81978a9871099e002997df84a05fc11789fb248e3e803a0dcb19e0cd

SHA512
64234ddd0c040bbad9b8e343ac24bc05a763445f854034fbfbe27176c3a628fcdf39e2508350bc63f058d138a9487e085213ee659135d3ad56a49b3833bf4f99

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\bin\lib\org\apache\logging\log4j\log4j-api\2.19.0\log4j-api-2.19.0.jar

Filesize
310KB

MD5
a7f8fc9751cdaa237a1e18059b4887da

SHA1
ea1b37f38c327596b216542bc636cfdc0b8036fa

SHA256
5ccb24ad9f92e768d0bc456d3061a737951262df803e004d2cad096b75a88d60

SHA512
f7cf3647ed90de7fdef377e4321aa9b9ea2512a46d99109b359f7fc5dcfe6d3ae9f879c212707ea4fd16d358d10d21c56d5178ec4803504745de6fe48c66c3f7

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\bin\lib\org\apache\logging\log4j\log4j-core\2.19.0\log4j-core-2.19.0.jar

Filesize
1.8MB

MD5
b7f521926226a16531f8e212b1da1ffd

SHA1
3b6eeb4de4c49c0fe38a4ee27188ff5fee44d0bb

SHA256
b4a1796fab7bfc36df015c1b4052459147997e8d215a7199d71d05f9e747e4f4

SHA512
1300ada6f86818ef4dcd17448a8965c1c6dd41ec414de2b2a5bafdf25d03c12100fa9e8f422d7b346f2984e5dfb3d599f8c1a971a6bcaca0cf938943d06364e7

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\bin\lib\org\apache\logging\log4j\log4j-slf4j2-impl\2.19.0\log4j-slf4j2-impl-2.19.0.jar

Filesize
27KB

MD5
da5fdc7ca6095583542ddecd0edfdcb8

SHA1
5c04bfdd63ce9dceb2e284b81e96b6a70010ee10

SHA256
825605eacb2d5605b105c53d4108c18125e0f82f62960d0be583278b9c524f3c

SHA512
ef2ae40f602ca3e0df0e159b6a77656ddc548fcd676d944daa68d1e0b48ebbb9f777649c61f172ccf3f554798584455ccf9a62f3aa6ce1ab31e59ead92d809df

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\bin\lib\org\jdom\jdom\2.0.2\jdom-2.0.2.jar

Filesize
288KB

MD5
f2ce377fffc36a069117c578c14139ba

SHA1
d06c71e0df0ac4b94deb737718580ccce22d92e8

SHA256
2bdf7a48fddc9259f5aa420eee328e939d71302a6a1b79a176e4fd47ee988b97

SHA512
d466ea78fe5d01f637096c3cf709e9b3624457c0a7057d9d8f1654c5e1c5c86d127a0f0d39f4147de7c4b4bea34fb7a8d8d1a55147f47e0b3f6dad7e9966b7f0

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\bin\lib\org\nanohttpd\nanohttpd\2.3.1\nanohttpd-2.3.1.jar

Filesize
50KB

MD5
847ff87de16561e3dcede3eda6abfab6

SHA1
a8d54d1ca554a77f377eff6bf9e16ca8383c8f6c

SHA256
de864c47818157141a24c9acb36df0c47d7bf15b7ff48c90610f3eb4e5df0e58

SHA512
b736313793f8304817ac9616d2a1052d6cb97befe7273455a9da95db4712db2e0a42d0cb01cbdff339343d9742d25af55ec2a8ba67f5394433397ef58f03a95a

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\bin\lib\org\slf4j\slf4j-api\2.0.1\slf4j-api-2.0.1.jar

Filesize
59KB

MD5
f83e57c047d1e3e226b77abc9141d233

SHA1
f48d81adce2abf5ad3cfe463df517952749e03bc

SHA256
b36b99b8d99ea7857554d9b25dfdbd1fb25378c926f7b9e0249983c99335b2c4

SHA512
2f8f02b099de6e5eaaaf6d1a2f42d0a7d145696d348305d0ea64a4c9e18dc63504aaf55965055ae4d1ff1b471f768d74c95e756795bc13c356a9d388a5c587ad

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\bin\lib\ru\turikhay\app\nstweaker\1.0\nstweaker-1.0.jar

Filesize
498KB

MD5
4c6f3ccd95cd3e97f58cd6b86d0fd280

SHA1
b883016ebe068c907add2692e36ecc68b0427577

SHA256
6b4c15577b5256b64c7e3d69dcdbf8d18f17f68ac5928e36936bd6a40a91c218

SHA512
cd5eb7c0dc74656eca2648e4c444f08065953bcbdc907dcfd2af15f338c50745d1c660235bbad346e3b8fa64651a8daee30cbb32198b4db2440fd1b0b44b21b4

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\mcl.properties

Filesize
1KB

MD5
4aa3295ce768314c3a47a6a23218efbf

SHA1
3bd4ae915a7ee2d86139cde7e7ed104eda3a5c12

SHA256
403e2c76348ea1847def5bb37bfb30308620e2ebc97ea9cc7e15ea1c232e7368

SHA512
19c28715e6bbf292931ee2c4319278a61a4bb70b98247b096ca2050276574ac9140961b613f1c70ea7f28852360694365ccfea7d6374e418278dcd7fcdd4039a

Download Submit
memory/920-11-0x000001BA2E3A0000-0x000001BA2E3A1000-memory.dmp

Filesize
4KB

Download
memory/920-15-0x00007FFE2FCB0000-0x00007FFE2FDDA000-memory.dmp

Filesize
1.2MB

Download
memory/920-13-0x000001BA2E3A0000-0x000001BA2E3A1000-memory.dmp

Filesize
4KB

Download
memory/920-2-0x00007FFE2FCB0000-0x00007FFE2FDDA000-memory.dmp

Filesize
1.2MB

Download
memory/3724-96-0x0000026511870000-0x0000026511871000-memory.dmp

Filesize
4KB

Download
memory/3724-57-0x00007FFE2FCB0000-0x00007FFE2FDDA000-memory.dmp

Filesize
1.2MB

Download
memory/3724-139-0x0000026511870000-0x0000026511871000-memory.dmp

Filesize
4KB

Download
memory/3724-128-0x0000026511870000-0x0000026511871000-memory.dmp

Filesize
4KB

Download
memory/3724-126-0x0000026511870000-0x0000026511871000-memory.dmp

Filesize
4KB

Download
memory/3724-107-0x00007FFE2FCB0000-0x00007FFE2FDDA000-memory.dmp

Filesize
1.2MB

Download
memory/3724-94-0x00007FFE2FCB0000-0x00007FFE2FDDA000-memory.dmp

Filesize
1.2MB

Download
memory/3724-148-0x0000026511870000-0x0000026511871000-memory.dmp

Filesize
4KB

Download
memory/3724-154-0x0000026511870000-0x0000026511871000-memory.dmp

Filesize
4KB

Download
memory/3724-216-0x0000026511870000-0x0000026511871000-memory.dmp

Filesize
4KB

Download
memory/3724-169-0x0000026511870000-0x0000026511871000-memory.dmp

Filesize
4KB

Download
memory/3724-91-0x00007FFE2FCB0000-0x00007FFE2FDDA000-memory.dmp

Filesize
1.2MB

Download
memory/3724-75-0x0000026511870000-0x0000026511871000-memory.dmp

Filesize
4KB

Download
memory/3724-145-0x0000026511870000-0x0000026511871000-memory.dmp

Filesize
4KB

Download
memory/3724-53-0x0000026511870000-0x0000026511871000-memory.dmp

Filesize
4KB

Download
memory/3724-45-0x00007FFE2FCB0000-0x00007FFE2FDDA000-memory.dmp

Filesize
1.2MB

Download
memory/3724-38-0x00007FFE2FCB0000-0x00007FFE2FDDA000-memory.dmp

Filesize
1.2MB

Download
memory/3724-27-0x0000026511870000-0x0000026511871000-memory.dmp

Filesize
4KB

Download
memory/3724-180-0x0000026511870000-0x0000026511871000-memory.dmp

Filesize
4KB

Download
memory/3724-17-0x00007FFE2FCB0000-0x00007FFE2FDDA000-memory.dmp

Filesize
1.2MB

Download
memory/3724-186-0x0000026511870000-0x0000026511871000-memory.dmp

Filesize
4KB

Download
memory/3724-182-0x0000026511870000-0x0000026511871000-memory.dmp

Filesize
4KB

Download
memory/3724-790-0x00007FFE2FCB0000-0x00007FFE2FDDA000-memory.dmp

Filesize
1.2MB

Download
memory/3724-800-0x00007FFE2FCB0000-0x00007FFE2FDDA000-memory.dmp

Filesize
1.2MB

Download
memory/3724-191-0x0000026511870000-0x0000026511871000-memory.dmp

Filesize
4KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads