Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

19/07/2024, 17:51

240719-wfd2basfmm 6

19/07/2024, 17:47

240719-wczhvaweje 6

19/07/2024, 17:46

240719-wb9x7asejk 1

Analysis

  • max time kernel
    36s
  • max time network
    22s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    19/07/2024, 17:46

General

  • Target

    LauncherFenix-Minecraft-v7.jar

  • Size

    65KB

  • MD5

    fea39379db50e2a8feee8bac75ab769d

  • SHA1

    1b1df2b43088ddff1394d50d515901570ab18f40

  • SHA256

    e7b3db67c5b22fb6175be7299d1ad622d6183210d212ca3ce464292b627400f1

  • SHA512

    25487310a04b60b561d013b01e7d595e545e1da3b352e046774b95a54f2877ffad2b64d961dc8ed99532dc8c83719f0e281cf0540cf25e4b0708d2c5d64c7c79

  • SSDEEP

    1536:paoqO4pFE7IxmtlSBszOg+0HUad8vr7lK:p56K7ItBjgXHUYCnlK

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Windows\system32\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\LauncherFenix-Minecraft-v7.jar
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2508

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\.minecraft\launcherfenix.jar

    Filesize

    500KB

    MD5

    84591cf8bbe4b94d5a83b2cdd605d4b5

    SHA1

    85f1dbf03d2b4c52e067849b93c3f4c7ec284886

    SHA256

    b8c2bf47cb70a77582c302284554ecd4a29f9ee55c09fc2193b3ba942d5884ae

    SHA512

    31ff3523bedc87efd5040c46fdaff325c29fa109a912b729c81660c0737505e9dbd2f9bc0a443bfce12ede2569d023cc1f56f6bea0943a669f4f85e0f420830d

  • memory/2508-48-0x0000000000260000-0x0000000000261000-memory.dmp

    Filesize

    4KB

  • memory/2508-473-0x00000000021C0000-0x00000000021CA000-memory.dmp

    Filesize

    40KB

  • memory/2508-16-0x0000000000260000-0x0000000000261000-memory.dmp

    Filesize

    4KB

  • memory/2508-23-0x0000000000260000-0x0000000000261000-memory.dmp

    Filesize

    4KB

  • memory/2508-67-0x0000000000260000-0x0000000000261000-memory.dmp

    Filesize

    4KB

  • memory/2508-28-0x0000000000260000-0x0000000000261000-memory.dmp

    Filesize

    4KB

  • memory/2508-2-0x00000000023A0000-0x0000000002610000-memory.dmp

    Filesize

    2.4MB

  • memory/2508-50-0x0000000000260000-0x0000000000261000-memory.dmp

    Filesize

    4KB

  • memory/2508-55-0x0000000005690000-0x000000000569A000-memory.dmp

    Filesize

    40KB

  • memory/2508-54-0x0000000005690000-0x000000000569A000-memory.dmp

    Filesize

    40KB

  • memory/2508-53-0x0000000005690000-0x000000000569A000-memory.dmp

    Filesize

    40KB

  • memory/2508-52-0x0000000005690000-0x000000000569A000-memory.dmp

    Filesize

    40KB

  • memory/2508-13-0x00000000021C0000-0x00000000021CA000-memory.dmp

    Filesize

    40KB

  • memory/2508-59-0x0000000000260000-0x0000000000261000-memory.dmp

    Filesize

    4KB

  • memory/2508-25-0x0000000000260000-0x0000000000261000-memory.dmp

    Filesize

    4KB

  • memory/2508-68-0x0000000000260000-0x0000000000261000-memory.dmp

    Filesize

    4KB

  • memory/2508-72-0x0000000000260000-0x0000000000261000-memory.dmp

    Filesize

    4KB

  • memory/2508-73-0x0000000000260000-0x0000000000261000-memory.dmp

    Filesize

    4KB

  • memory/2508-97-0x0000000000260000-0x0000000000261000-memory.dmp

    Filesize

    4KB

  • memory/2508-104-0x0000000000260000-0x0000000000261000-memory.dmp

    Filesize

    4KB

  • memory/2508-14-0x00000000021C0000-0x00000000021CA000-memory.dmp

    Filesize

    40KB

  • memory/2508-438-0x00000000023A0000-0x0000000002610000-memory.dmp

    Filesize

    2.4MB

  • memory/2508-472-0x00000000021C0000-0x00000000021CA000-memory.dmp

    Filesize

    40KB

  • memory/2508-64-0x0000000000260000-0x0000000000261000-memory.dmp

    Filesize

    4KB

  • memory/2508-503-0x0000000005690000-0x000000000569A000-memory.dmp

    Filesize

    40KB

  • memory/2508-504-0x0000000005690000-0x000000000569A000-memory.dmp

    Filesize

    40KB

  • memory/2508-505-0x0000000005690000-0x000000000569A000-memory.dmp

    Filesize

    40KB

  • memory/2508-583-0x00000000023A0000-0x0000000002610000-memory.dmp

    Filesize

    2.4MB