Overview

overview

3

Static

static

1

YSticky-20...e.html

windows7-x64

3

YSticky-20...e.html

windows10-2004-x64

3

YSticky-20...unx.sh

ubuntu-18.04-amd64

1

YSticky-20...unx.sh

debian-9-armhf

1

YSticky-20...unx.sh

debian-9-mips

1

YSticky-20...unx.sh

debian-9-mipsel

1

YSticky-20...in.bat

windows7-x64

1

YSticky-20...in.bat

windows10-2004-x64

1

YSticky-20...ky.jar

windows7-x64

1

YSticky-20...ky.jar

windows10-2004-x64

1

Analysis

  • max time kernel
    93s
  • max time network
    123s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02-09-2024 15:45

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    YSticky-20210604/ysticky.jar

  • Size

    10KB

  • MD5

    9425ef6be6a829290155a51155a8d6a7

  • SHA1

    0cf91dcb7786b785fee2517c2aa6dfef27cea6f9

  • SHA256

    9ed49750c489bc741ae8ab9a3a4082b5244c86f409f92061d9680d82b2197e82

  • SHA512

    2e7a001ae80b6d357d09466746f416dc0cb80d21108b3d271234c3b814801c00b216c9dd45343e3e267b0f7c6b6c9961b35cc7285e207d93b9c155e73da2bbdb

  • SSDEEP

    192:ASlgqzQ6EoqGnjLmXcMLQcGhOLEXY+NlIYb/bq/ubDzqiUKDBUYBnzTtl+:AglFqGjLmXcGf6OxaIqG/mmiUK7l+

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\YSticky-20210604\ysticky.jar
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1616

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1616-2-0x000001C259130000-0x000001C2593A0000-memory.dmp

    Filesize

    2.4MB

    Download

  • memory/1616-17-0x000001C257860000-0x000001C257861000-memory.dmp

    Filesize

    4KB

    Download

  • memory/1616-20-0x000001C259130000-0x000001C2593A0000-memory.dmp

    Filesize

    2.4MB

    Download