Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    02-09-2024 15:45

General

  • Target

    YSticky-20210604/ysticky.jar

  • Size

    10KB

  • MD5

    9425ef6be6a829290155a51155a8d6a7

  • SHA1

    0cf91dcb7786b785fee2517c2aa6dfef27cea6f9

  • SHA256

    9ed49750c489bc741ae8ab9a3a4082b5244c86f409f92061d9680d82b2197e82

  • SHA512

    2e7a001ae80b6d357d09466746f416dc0cb80d21108b3d271234c3b814801c00b216c9dd45343e3e267b0f7c6b6c9961b35cc7285e207d93b9c155e73da2bbdb

  • SSDEEP

    192:ASlgqzQ6EoqGnjLmXcMLQcGhOLEXY+NlIYb/bq/ubDzqiUKDBUYBnzTtl+:AglFqGjLmXcGf6OxaIqG/mmiUK7l+

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Windows\system32\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\YSticky-20210604\ysticky.jar
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2412

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2412-2-0x0000000002600000-0x0000000002870000-memory.dmp

    Filesize

    2.4MB

  • memory/2412-15-0x00000000002C0000-0x00000000002CA000-memory.dmp

    Filesize

    40KB

  • memory/2412-14-0x00000000002C0000-0x00000000002CA000-memory.dmp

    Filesize

    40KB

  • memory/2412-17-0x0000000000140000-0x0000000000141000-memory.dmp

    Filesize

    4KB

  • memory/2412-18-0x0000000002600000-0x0000000002870000-memory.dmp

    Filesize

    2.4MB

  • memory/2412-19-0x00000000002C0000-0x00000000002CA000-memory.dmp

    Filesize

    40KB