b45648c0d296efe546cb9ac31943c88a5c5954847fa938e2314249ac2d278176

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
18/07/2024, 23:52

Target

MagicLauncher_1.3.4.exe
Size

388KB
MD5

0c8082798a5a3afef642bf4eb44cd800
SHA1

2d490783e9f0e0934859682d8de07a48a13c1df5
SHA256

b45648c0d296efe546cb9ac31943c88a5c5954847fa938e2314249ac2d278176
SHA512

684ab8c1464f4e56baaa70b048f5bca7be3ac0cf075a54cdd9b6420c385c01d77f8b5095c13bc0f113963d9574e4550995d1f40f0c903ad4d1cf1d310b503f8b
SSDEEP

12288:8cEHU0vuviPAme/GPjeTpwKNWflBukxL//Nl:8cNCuviPAf/+K6wWf3ukxBl

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2084	javaw.exe
2084	javaw.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2368 wrote to memory of 2084	2368	MagicLauncher_1.3.4.exe	30
PID 2368 wrote to memory of 2084	2368	MagicLauncher_1.3.4.exe	30
PID 2368 wrote to memory of 2084	2368	MagicLauncher_1.3.4.exe	30
PID 2368 wrote to memory of 2084	2368	MagicLauncher_1.3.4.exe	30

C:\Users\Admin\AppData\Local\Temp\MagicLauncher_1.3.4.exe
"C:\Users\Admin\AppData\Local\Temp\MagicLauncher_1.3.4.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2368
- C:\Program Files\Java\jre7\bin\javaw.exe
  "C:\Program Files\Java\jre7\bin\javaw.exe" -jar "C:\Users\Admin\AppData\Local\Temp\MagicLauncher_1.3.4.exe"
  2⤵
  - Suspicious use of SetWindowsHookEx
  PID:2084

memory/2084-3-0x0000000002510000-0x0000000002780000-memory.dmp

Filesize
2.4MB

Download
memory/2084-15-0x00000000021B0000-0x00000000021BA000-memory.dmp

Filesize
40KB

Download
memory/2084-14-0x00000000021B0000-0x00000000021BA000-memory.dmp

Filesize
40KB

Download
memory/2084-28-0x0000000000540000-0x0000000000541000-memory.dmp

Filesize
4KB

Download
memory/2084-38-0x0000000000540000-0x0000000000541000-memory.dmp

Filesize
4KB

Download
memory/2084-43-0x0000000000540000-0x0000000000541000-memory.dmp

Filesize
4KB

Download
memory/2084-46-0x0000000000540000-0x0000000000541000-memory.dmp

Filesize
4KB

Download
memory/2084-48-0x0000000002510000-0x0000000002780000-memory.dmp

Filesize
2.4MB

Download
memory/2084-50-0x00000000021B0000-0x00000000021BA000-memory.dmp

Filesize
40KB

Download
memory/2084-49-0x00000000021B0000-0x00000000021BA000-memory.dmp

Filesize
40KB

Download
memory/2368-0-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download