05ae2f0dd61ef10019b94c200e8df192b767bb4cc24a7e7b329ab43cc9c74caf

General

Target

SKlauncher-3.2.exe
Size

1.6MB
MD5

b63468dd118dfbca5ef7967ba344e0e3
SHA1

2ba4f0df5f3bd284bf2a89aba320e4440d8b8355
SHA256

05ae2f0dd61ef10019b94c200e8df192b767bb4cc24a7e7b329ab43cc9c74caf
SHA512

007ecb7445dc0c01a802b5a2c91313aae59f9dc96e27455dd85e7a92a4e649d683fbc2ada5f48925d9ab3b4fdaea20aa89eeb442fde079902aecb5ca3454a548
SSDEEP

49152:HIBc3n9dRvwVlzhFAQ/ggUTPQjYEiim7V:oBaO/FAqMQjYEXm

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
2132	SKlauncher-3.2.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2132	SKlauncher-3.2.exe
2132	SKlauncher-3.2.exe
2132	SKlauncher-3.2.exe

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 2132 wrote to memory of 952	2132	SKlauncher-3.2.exe	85
PID 2132 wrote to memory of 952	2132	SKlauncher-3.2.exe	85
PID 2132 wrote to memory of 4472	2132	SKlauncher-3.2.exe	89
PID 2132 wrote to memory of 4472	2132	SKlauncher-3.2.exe	89
PID 2132 wrote to memory of 2784	2132	SKlauncher-3.2.exe	92
PID 2132 wrote to memory of 2784	2132	SKlauncher-3.2.exe	92

C:\Users\Admin\AppData\Local\Temp\SKlauncher-3.2.exe
"C:\Users\Admin\AppData\Local\Temp\SKlauncher-3.2.exe"
1⤵
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2132
- \??\c:\PROGRA~1\java\jre-1.8\bin\java.exe
  "c:\PROGRA~1\java\jre-1.8\bin\java.exe" -version
  2⤵
  PID:952
- \??\c:\PROGRA~1\java\jdk-1.8\jre\bin\java.exe
  "c:\PROGRA~1\java\jdk-1.8\jre\bin\java.exe" -version
  2⤵
  PID:4472
- C:\Windows\SYSTEM32\reg.exe
  reg query "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize" /v AppsUseLightTheme
  2⤵
  PID:2784

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\ProgramData\Oracle\Java\.oracle_jre_usage\3903daac9bc4a3b7.timestamp

Filesize
46B

MD5
c899be020b0c6bc09a5a5cb43dfc9258

SHA1
0ae90f6ff4a6d10b40daba59321a086ce58da474

SHA256
e9c59956db9d45f01906c0307fe31168bca4a218e25fbaeefe89b5aae98af7a5

SHA512
b54495fa09d9a892318b91603ba8a2d40cc26c34ec4fee31fdd62fb1d3174da6a2aa96ba95c1007b53fc766092fa92cf0be667cdbdff1390379c7d15ddb20fc1

Download Submit
C:\Users\Admin\AppData\Local\Temp\+JXF5716934079411057024.tmp

Filesize
397KB

MD5
fdb50e0d48cdcf775fa1ac0dc3c33bd4

SHA1
5c95e5d66572aeca303512ba41a8dde0cea92c80

SHA256
64f8be6e55c37e32ef03da99714bf3aa58b8f2099bfe4f759a7578e3b8291123

SHA512
20ce8100c96058d4e64a12d0817b7ce638cec9f5d03651320eb6b9c3f47ee289ccc695bd3b5b6bf8e0867cdab0ebb6e8cae77df054e185828a6a13f3733ede53

Download Submit
C:\Users\Admin\AppData\Local\Temp\+JXF6550510911159281603.tmp

Filesize
405KB

MD5
8f2869a84ad71f156a17bb66611ebe22

SHA1
0325b9b3992fa2fdc9c715730a33135696c68a39

SHA256
0cb1bc1335372d9e3a0cf6f5311c7cce87af90d2a777fdeec18be605a2a70bc1

SHA512
3d4315d591dcf7609c15b3e32bcc234659fcdbe4be24aef5dba4ad248ad42fd9ab082250244f99dc801ec21575b7400aace50a1e8834d5c33404e76a0caac834

Download Submit
C:\Users\Admin\AppData\Local\Temp\+JXF901452614537637742.tmp

Filesize
398KB

MD5
ff5fdc6f42c720a3ebd7b60f6d605888

SHA1
460c18ddf24846e3d8792d440fd9a750503aef1b

SHA256
1936d24cb0f4ce7006e08c6ef4243d2e42a7b45f2249f8fe54d92f76a317dfd1

SHA512
d3d333b1627d597c83a321a3daca38df63ea0f7cab716006935905b8170379ec2aab26cb7ffc7b539ca272cf7fb7937198aee6db3411077bedf3d2b920d078a3

Download Submit
C:\Users\Admin\AppData\Local\Temp\e4jBDF1.tmp_dir1723073282\SKlauncher-3.2.jar

Filesize
1.1MB

MD5
4d653e61ba01a521c56b9a70a9c9814e

SHA1
de855dc3dbc914b497b58da92e0c21fff660796d

SHA256
f7d3e01dcfc001cc80a988c518d4358955842d140054214d1367972c5c543350

SHA512
e6a7db6e2893b5b01dd0c84a230d88abf50da63ceb1af5754a2c4c1fbd307a799a74f3f368430d3beb33590cda2e0a3cf509fef11c4477b76e8d3c4a582b5def

Download Submit
C:\Users\Admin\AppData\Local\Temp\flatlaf.temp\flatlaf-windows-x86_64-4874610122200.dll

Filesize
22KB

MD5
dcd68a87b7e6edbcfde48150403b22eb

SHA1
28e4839a29725075772fccc39b44e194eb91e477

SHA256
ae3352b6ad6cffaae55f4387f9f5e79365ea17f8d5fb45ef11d21c3300a49a4c

SHA512
ac2a6bc0afcd08c56090536a937772edd54f35505c9a5837d9bc8e91c31edb6137cf5191986b3473e9e2f512950b4dbfe4088598bfd1faf47088124c70aeba71

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\sklauncher-fx.jar

Filesize
14.2MB

MD5
617b9e689754f5f96e3d3d75da20043c

SHA1
97415a0bb2a4e1e60d3e270753e90ecdfeda57b6

SHA256
d65c4b1115b47e8b3867bcdcf1baed949d5d3caa589c991446ccd6c6de5b46ad

SHA512
5937e666ff1135cdc55fe1fa7972bbf544b921e35ab87edbf19ab1be89dbe53a1e9a2753676229c51eac535a436b220afe615b00c4a201b8f7f93fbc92c46106

Download Submit
memory/952-5-0x0000026217BC0000-0x0000026217E30000-memory.dmp

Filesize
2.4MB

Download
memory/952-15-0x0000026217BA0000-0x0000026217BA1000-memory.dmp

Filesize
4KB

Download
memory/952-16-0x0000026217BC0000-0x0000026217E30000-memory.dmp

Filesize
2.4MB

Download
memory/2132-221-0x00000000024E0000-0x00000000024E1000-memory.dmp

Filesize
4KB

Download
memory/2132-219-0x00000000024E0000-0x00000000024E1000-memory.dmp

Filesize
4KB

Download
memory/2132-106-0x00000000024E0000-0x00000000024E1000-memory.dmp

Filesize
4KB

Download
memory/2132-120-0x00000000024E0000-0x00000000024E1000-memory.dmp

Filesize
4KB

Download
memory/2132-127-0x00000000024E0000-0x00000000024E1000-memory.dmp

Filesize
4KB

Download
memory/2132-49-0x00000000024E0000-0x00000000024E1000-memory.dmp

Filesize
4KB

Download
memory/2132-209-0x00000000024E0000-0x00000000024E1000-memory.dmp

Filesize
4KB

Download
memory/2132-160-0x00000000024E0000-0x00000000024E1000-memory.dmp

Filesize
4KB

Download
memory/2132-218-0x00000000024E0000-0x00000000024E1000-memory.dmp

Filesize
4KB

Download
memory/2132-81-0x00000000024E0000-0x00000000024E1000-memory.dmp

Filesize
4KB

Download
memory/2132-45-0x00000000024E0000-0x00000000024E1000-memory.dmp

Filesize
4KB

Download
memory/2132-33-0x0000000002900000-0x0000000002B70000-memory.dmp

Filesize
2.4MB

Download
memory/2132-288-0x00000000024E0000-0x00000000024E1000-memory.dmp

Filesize
4KB

Download
memory/2132-295-0x00000000024E0000-0x00000000024E1000-memory.dmp

Filesize
4KB

Download
memory/2132-298-0x00000000024E0000-0x00000000024E1000-memory.dmp

Filesize
4KB

Download
memory/2132-306-0x00000000024E0000-0x00000000024E1000-memory.dmp

Filesize
4KB

Download
memory/2132-776-0x0000000002900000-0x0000000002B70000-memory.dmp

Filesize
2.4MB

Download
memory/4472-29-0x000001B1C97A0000-0x000001B1C97A1000-memory.dmp

Filesize
4KB

Download
memory/4472-19-0x000001B1CAFB0000-0x000001B1CB220000-memory.dmp

Filesize
2.4MB

Download
memory/4472-30-0x000001B1CAFB0000-0x000001B1CB220000-memory.dmp

Filesize
2.4MB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads