Analysis

  • max time kernel
    96s
  • max time network
    98s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05-09-2024 10:39

General

  • Target

    Roblox anti-AFK.jar

  • Size

    3.5MB

  • MD5

    99df9859d6ef468110e7740801dbc31d

  • SHA1

    08175cf8fe82698f57d533fe65f6ce68ee8da0ab

  • SHA256

    092319316cf920c0807b0745d107d1ba44691d84f0e8a52de1dae8a62e081c41

  • SHA512

    d089b3c21dea4108329c51163f0c7a2a5b4d2189ba8293cd548678b2311a6e1eb66b97c4580e777ae0012a647ffdae9bd46efb0c30e5a8e9f76d53586a4f9831

  • SSDEEP

    98304:3QYabkKOwi4j0B7j/m1Qw7M8ZurqxwT26npVX1zQ/:A/I7jsY8Z0qya6lzQ/

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
    java -jar "C:\Users\Admin\AppData\Local\Temp\Roblox anti-AFK.jar"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3512

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3512-2-0x000001DC36AC0000-0x000001DC36D30000-memory.dmp

    Filesize

    2.4MB

  • memory/3512-18-0x000001DC351F0000-0x000001DC351F1000-memory.dmp

    Filesize

    4KB

  • memory/3512-28-0x000001DC36D30000-0x000001DC36D40000-memory.dmp

    Filesize

    64KB

  • memory/3512-29-0x000001DC36D40000-0x000001DC36D50000-memory.dmp

    Filesize

    64KB

  • memory/3512-37-0x000001DC36D50000-0x000001DC36D60000-memory.dmp

    Filesize

    64KB

  • memory/3512-45-0x000001DC36D60000-0x000001DC36D70000-memory.dmp

    Filesize

    64KB

  • memory/3512-47-0x000001DC36D70000-0x000001DC36D80000-memory.dmp

    Filesize

    64KB

  • memory/3512-50-0x000001DC36D80000-0x000001DC36D90000-memory.dmp

    Filesize

    64KB

  • memory/3512-51-0x000001DC36D90000-0x000001DC36DA0000-memory.dmp

    Filesize

    64KB

  • memory/3512-53-0x000001DC36DA0000-0x000001DC36DB0000-memory.dmp

    Filesize

    64KB

  • memory/3512-56-0x000001DC36AC0000-0x000001DC36D30000-memory.dmp

    Filesize

    2.4MB

  • memory/3512-59-0x000001DC36DC0000-0x000001DC36DD0000-memory.dmp

    Filesize

    64KB

  • memory/3512-61-0x000001DC36DD0000-0x000001DC36DE0000-memory.dmp

    Filesize

    64KB

  • memory/3512-60-0x000001DC36D30000-0x000001DC36D40000-memory.dmp

    Filesize

    64KB

  • memory/3512-58-0x000001DC36DB0000-0x000001DC36DC0000-memory.dmp

    Filesize

    64KB

  • memory/3512-64-0x000001DC36D40000-0x000001DC36D50000-memory.dmp

    Filesize

    64KB

  • memory/3512-67-0x000001DC36D50000-0x000001DC36D60000-memory.dmp

    Filesize

    64KB

  • memory/3512-66-0x000001DC36DF0000-0x000001DC36E00000-memory.dmp

    Filesize

    64KB

  • memory/3512-65-0x000001DC36DE0000-0x000001DC36DF0000-memory.dmp

    Filesize

    64KB

  • memory/3512-69-0x000001DC351F0000-0x000001DC351F1000-memory.dmp

    Filesize

    4KB

  • memory/3512-75-0x000001DC36E10000-0x000001DC36E20000-memory.dmp

    Filesize

    64KB

  • memory/3512-77-0x000001DC36D70000-0x000001DC36D80000-memory.dmp

    Filesize

    64KB

  • memory/3512-76-0x000001DC36E20000-0x000001DC36E30000-memory.dmp

    Filesize

    64KB

  • memory/3512-74-0x000001DC36E00000-0x000001DC36E10000-memory.dmp

    Filesize

    64KB

  • memory/3512-73-0x000001DC36D60000-0x000001DC36D70000-memory.dmp

    Filesize

    64KB

  • memory/3512-79-0x000001DC36E30000-0x000001DC36E40000-memory.dmp

    Filesize

    64KB

  • memory/3512-78-0x000001DC36D80000-0x000001DC36D90000-memory.dmp

    Filesize

    64KB

  • memory/3512-87-0x000001DC36DA0000-0x000001DC36DB0000-memory.dmp

    Filesize

    64KB

  • memory/3512-86-0x000001DC36E60000-0x000001DC36E70000-memory.dmp

    Filesize

    64KB

  • memory/3512-85-0x000001DC36E50000-0x000001DC36E60000-memory.dmp

    Filesize

    64KB

  • memory/3512-84-0x000001DC36E40000-0x000001DC36E50000-memory.dmp

    Filesize

    64KB

  • memory/3512-83-0x000001DC36D90000-0x000001DC36DA0000-memory.dmp

    Filesize

    64KB

  • memory/3512-91-0x000001DC36E70000-0x000001DC36E80000-memory.dmp

    Filesize

    64KB

  • memory/3512-90-0x000001DC36DB0000-0x000001DC36DC0000-memory.dmp

    Filesize

    64KB

  • memory/3512-93-0x000001DC36E80000-0x000001DC36E90000-memory.dmp

    Filesize

    64KB

  • memory/3512-92-0x000001DC36DC0000-0x000001DC36DD0000-memory.dmp

    Filesize

    64KB

  • memory/3512-96-0x000001DC36E90000-0x000001DC36EA0000-memory.dmp

    Filesize

    64KB

  • memory/3512-95-0x000001DC36DD0000-0x000001DC36DE0000-memory.dmp

    Filesize

    64KB

  • memory/3512-99-0x000001DC36DE0000-0x000001DC36DF0000-memory.dmp

    Filesize

    64KB

  • memory/3512-100-0x000001DC36DF0000-0x000001DC36E00000-memory.dmp

    Filesize

    64KB

  • memory/3512-102-0x000001DC36E00000-0x000001DC36E10000-memory.dmp

    Filesize

    64KB

  • memory/3512-104-0x000001DC36E20000-0x000001DC36E30000-memory.dmp

    Filesize

    64KB

  • memory/3512-103-0x000001DC36E10000-0x000001DC36E20000-memory.dmp

    Filesize

    64KB

  • memory/3512-105-0x000001DC36E30000-0x000001DC36E40000-memory.dmp

    Filesize

    64KB

  • memory/3512-107-0x000001DC36E40000-0x000001DC36E50000-memory.dmp

    Filesize

    64KB

  • memory/3512-108-0x000001DC36E50000-0x000001DC36E60000-memory.dmp

    Filesize

    64KB

  • memory/3512-110-0x000001DC36EA0000-0x000001DC36EB0000-memory.dmp

    Filesize

    64KB

  • memory/3512-109-0x000001DC36E60000-0x000001DC36E70000-memory.dmp

    Filesize

    64KB

  • memory/3512-111-0x000001DC351F0000-0x000001DC351F1000-memory.dmp

    Filesize

    4KB

  • memory/3512-112-0x000001DC36E70000-0x000001DC36E80000-memory.dmp

    Filesize

    64KB

  • memory/3512-114-0x000001DC36E80000-0x000001DC36E90000-memory.dmp

    Filesize

    64KB

  • memory/3512-116-0x000001DC36E90000-0x000001DC36EA0000-memory.dmp

    Filesize

    64KB

  • memory/3512-117-0x000001DC36EA0000-0x000001DC36EB0000-memory.dmp

    Filesize

    64KB

  • memory/3512-118-0x000001DC36EB0000-0x000001DC36EC0000-memory.dmp

    Filesize

    64KB