Analysis

  • max time kernel
    137s
  • max time network
    142s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240802-en
  • resource tags

    arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    28-09-2024 00:14

General

  • Target

    llama_alarm_clock.jar

  • Size

    126KB

  • MD5

    2419847d84bc1bba813313e3cf7f97ed

  • SHA1

    d4bb7ff3c69cfd1e8e109a25f99d106a1a673eec

  • SHA256

    1c1684dfbab912a0f36e15653182c20c33356d10e89bb45ab13de90ecaa9eb56

  • SHA512

    76b477e5c0338697276378d82962c3d25d00da127deaf74d697e7375c0563c4ac31e29a4960d5efce6bea28467f3544f126f1b17ef4bb8745c99d66a1b2c8dea

  • SSDEEP

    3072:nLeASYf1+djpLblQ0Xnhc8CspjaOWSRWHn3EJ5VyKPYtdVqK:nQYfitRboyRg3EJyKPsMK

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\llama_alarm_clock.jar
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2412

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2412-2-0x00000245B86E0000-0x00000245B8950000-memory.dmp

    Filesize

    2.4MB

  • memory/2412-15-0x00000245B70A0000-0x00000245B70A1000-memory.dmp

    Filesize

    4KB

  • memory/2412-19-0x00000245B8950000-0x00000245B8960000-memory.dmp

    Filesize

    64KB

  • memory/2412-21-0x00000245B8960000-0x00000245B8970000-memory.dmp

    Filesize

    64KB

  • memory/2412-23-0x00000245B70A0000-0x00000245B70A1000-memory.dmp

    Filesize

    4KB

  • memory/2412-31-0x00000245B8970000-0x00000245B8980000-memory.dmp

    Filesize

    64KB

  • memory/2412-32-0x00000245B70A0000-0x00000245B70A1000-memory.dmp

    Filesize

    4KB

  • memory/2412-34-0x00000245B70A0000-0x00000245B70A1000-memory.dmp

    Filesize

    4KB

  • memory/2412-42-0x00000245B70A0000-0x00000245B70A1000-memory.dmp

    Filesize

    4KB

  • memory/2412-44-0x00000245B70A0000-0x00000245B70A1000-memory.dmp

    Filesize

    4KB

  • memory/2412-46-0x00000245B70A0000-0x00000245B70A1000-memory.dmp

    Filesize

    4KB

  • memory/2412-50-0x00000245B70A0000-0x00000245B70A1000-memory.dmp

    Filesize

    4KB

  • memory/2412-51-0x00000245B86E0000-0x00000245B8950000-memory.dmp

    Filesize

    2.4MB

  • memory/2412-55-0x00000245B70A0000-0x00000245B70A1000-memory.dmp

    Filesize

    4KB

  • memory/2412-56-0x00000245B8950000-0x00000245B8960000-memory.dmp

    Filesize

    64KB

  • memory/2412-61-0x00000245B8960000-0x00000245B8970000-memory.dmp

    Filesize

    64KB

  • memory/2412-63-0x00000245B70A0000-0x00000245B70A1000-memory.dmp

    Filesize

    4KB

  • memory/2412-74-0x00000245B70A0000-0x00000245B70A1000-memory.dmp

    Filesize

    4KB

  • memory/2412-75-0x00000245B8970000-0x00000245B8980000-memory.dmp

    Filesize

    64KB

  • memory/2412-78-0x00000245B8980000-0x00000245B8990000-memory.dmp

    Filesize

    64KB

  • memory/2412-82-0x00000245B70A0000-0x00000245B70A1000-memory.dmp

    Filesize

    4KB

  • memory/2412-84-0x00000245B8990000-0x00000245B89A0000-memory.dmp

    Filesize

    64KB

  • memory/2412-86-0x00000245B70A0000-0x00000245B70A1000-memory.dmp

    Filesize

    4KB

  • memory/2412-90-0x00000245B89A0000-0x00000245B89B0000-memory.dmp

    Filesize

    64KB

  • memory/2412-96-0x00000245B70A0000-0x00000245B70A1000-memory.dmp

    Filesize

    4KB

  • memory/2412-99-0x00000245B89B0000-0x00000245B89C0000-memory.dmp

    Filesize

    64KB

  • memory/2412-101-0x00000245B70A0000-0x00000245B70A1000-memory.dmp

    Filesize

    4KB

  • memory/2412-103-0x00000245B70A0000-0x00000245B70A1000-memory.dmp

    Filesize

    4KB

  • memory/2412-107-0x00000245B89C0000-0x00000245B89D0000-memory.dmp

    Filesize

    64KB

  • memory/2412-109-0x00000245B70A0000-0x00000245B70A1000-memory.dmp

    Filesize

    4KB

  • memory/2412-111-0x00000245B89D0000-0x00000245B89E0000-memory.dmp

    Filesize

    64KB

  • memory/2412-113-0x00000245B70A0000-0x00000245B70A1000-memory.dmp

    Filesize

    4KB

  • memory/2412-115-0x00000245B70A0000-0x00000245B70A1000-memory.dmp

    Filesize

    4KB

  • memory/2412-117-0x00000245B70A0000-0x00000245B70A1000-memory.dmp

    Filesize

    4KB

  • memory/2412-120-0x00000245B8980000-0x00000245B8990000-memory.dmp

    Filesize

    64KB

  • memory/2412-126-0x00000245B70A0000-0x00000245B70A1000-memory.dmp

    Filesize

    4KB

  • memory/2412-129-0x00000245B70A0000-0x00000245B70A1000-memory.dmp

    Filesize

    4KB

  • memory/2412-131-0x00000245B89E0000-0x00000245B89F0000-memory.dmp

    Filesize

    64KB

  • memory/2412-130-0x00000245B8990000-0x00000245B89A0000-memory.dmp

    Filesize

    64KB

  • memory/2412-133-0x00000245B70A0000-0x00000245B70A1000-memory.dmp

    Filesize

    4KB

  • memory/2412-137-0x00000245B70A0000-0x00000245B70A1000-memory.dmp

    Filesize

    4KB

  • memory/2412-139-0x00000245B70A0000-0x00000245B70A1000-memory.dmp

    Filesize

    4KB

  • memory/2412-140-0x00000245B89A0000-0x00000245B89B0000-memory.dmp

    Filesize

    64KB

  • memory/2412-143-0x00000245B89B0000-0x00000245B89C0000-memory.dmp

    Filesize

    64KB

  • memory/2412-144-0x00000245B89F0000-0x00000245B8A00000-memory.dmp

    Filesize

    64KB

  • memory/2412-145-0x00000245B70A0000-0x00000245B70A1000-memory.dmp

    Filesize

    4KB

  • memory/2412-150-0x00000245B89C0000-0x00000245B89D0000-memory.dmp

    Filesize

    64KB

  • memory/2412-151-0x00000245B8A00000-0x00000245B8A10000-memory.dmp

    Filesize

    64KB

  • memory/2412-153-0x00000245B70A0000-0x00000245B70A1000-memory.dmp

    Filesize

    4KB

  • memory/2412-155-0x00000245B89D0000-0x00000245B89E0000-memory.dmp

    Filesize

    64KB

  • memory/2412-163-0x00000245B8A10000-0x00000245B8A20000-memory.dmp

    Filesize

    64KB

  • memory/2412-166-0x00000245B89E0000-0x00000245B89F0000-memory.dmp

    Filesize

    64KB

  • memory/2412-169-0x00000245B8A20000-0x00000245B8A30000-memory.dmp

    Filesize

    64KB

  • memory/2412-174-0x00000245B89F0000-0x00000245B8A00000-memory.dmp

    Filesize

    64KB

  • memory/2412-175-0x00000245B8A30000-0x00000245B8A40000-memory.dmp

    Filesize

    64KB

  • memory/2412-179-0x00000245B70A0000-0x00000245B70A1000-memory.dmp

    Filesize

    4KB

  • memory/2412-183-0x00000245B8A00000-0x00000245B8A10000-memory.dmp

    Filesize

    64KB

  • memory/2412-187-0x00000245B8A40000-0x00000245B8A50000-memory.dmp

    Filesize

    64KB

  • memory/2412-188-0x00000245B70A0000-0x00000245B70A1000-memory.dmp

    Filesize

    4KB

  • memory/2412-194-0x00000245B8A10000-0x00000245B8A20000-memory.dmp

    Filesize

    64KB

  • memory/2412-201-0x00000245B8A20000-0x00000245B8A30000-memory.dmp

    Filesize

    64KB

  • memory/2412-207-0x00000245B8A30000-0x00000245B8A40000-memory.dmp

    Filesize

    64KB

  • memory/2412-211-0x00000245B70A0000-0x00000245B70A1000-memory.dmp

    Filesize

    4KB

  • memory/2412-215-0x00000245B8A40000-0x00000245B8A50000-memory.dmp

    Filesize

    64KB

  • memory/2412-220-0x00000245B8A50000-0x00000245B8A60000-memory.dmp

    Filesize

    64KB

  • memory/2412-224-0x00000245B8A60000-0x00000245B8A70000-memory.dmp

    Filesize

    64KB

  • memory/2412-231-0x00000245B8A70000-0x00000245B8A80000-memory.dmp

    Filesize

    64KB

  • memory/2412-236-0x00000245B8A80000-0x00000245B8A90000-memory.dmp

    Filesize

    64KB

  • memory/2412-239-0x00000245B8A90000-0x00000245B8AA0000-memory.dmp

    Filesize

    64KB

  • memory/2412-243-0x00000245B8AA0000-0x00000245B8AB0000-memory.dmp

    Filesize

    64KB

  • memory/2412-252-0x00000245B8AB0000-0x00000245B8AC0000-memory.dmp

    Filesize

    64KB

  • memory/2412-256-0x00000245B8A50000-0x00000245B8A60000-memory.dmp

    Filesize

    64KB

  • memory/2412-260-0x00000245B8AC0000-0x00000245B8AD0000-memory.dmp

    Filesize

    64KB

  • memory/2412-259-0x00000245B8A60000-0x00000245B8A70000-memory.dmp

    Filesize

    64KB

  • memory/2412-264-0x00000245B8A70000-0x00000245B8A80000-memory.dmp

    Filesize

    64KB

  • memory/2412-271-0x00000245B8A80000-0x00000245B8A90000-memory.dmp

    Filesize

    64KB

  • memory/2412-272-0x00000245B8AD0000-0x00000245B8AE0000-memory.dmp

    Filesize

    64KB

  • memory/2412-276-0x00000245B8A90000-0x00000245B8AA0000-memory.dmp

    Filesize

    64KB

  • memory/2412-281-0x00000245B8AA0000-0x00000245B8AB0000-memory.dmp

    Filesize

    64KB

  • memory/2412-282-0x00000245B8AE0000-0x00000245B8AF0000-memory.dmp

    Filesize

    64KB

  • memory/2412-287-0x00000245B8AB0000-0x00000245B8AC0000-memory.dmp

    Filesize

    64KB

  • memory/2412-288-0x00000245B8AF0000-0x00000245B8B00000-memory.dmp

    Filesize

    64KB

  • memory/2412-295-0x00000245B8AC0000-0x00000245B8AD0000-memory.dmp

    Filesize

    64KB

  • memory/2412-302-0x00000245B8AD0000-0x00000245B8AE0000-memory.dmp

    Filesize

    64KB

  • memory/2412-308-0x00000245B8B00000-0x00000245B8B10000-memory.dmp

    Filesize

    64KB

  • memory/2412-310-0x00000245B8AE0000-0x00000245B8AF0000-memory.dmp

    Filesize

    64KB

  • memory/2412-315-0x00000245B8AF0000-0x00000245B8B00000-memory.dmp

    Filesize

    64KB

  • memory/2412-336-0x00000245B8B00000-0x00000245B8B10000-memory.dmp

    Filesize

    64KB

  • memory/2412-337-0x00000245B8B10000-0x00000245B8B20000-memory.dmp

    Filesize

    64KB

  • memory/2412-346-0x00000245B8B20000-0x00000245B8B30000-memory.dmp

    Filesize

    64KB

  • memory/2412-356-0x00000245B8B30000-0x00000245B8B40000-memory.dmp

    Filesize

    64KB

  • memory/2412-362-0x00000245B8B40000-0x00000245B8B50000-memory.dmp

    Filesize

    64KB

  • memory/2412-369-0x00000245B8B10000-0x00000245B8B20000-memory.dmp

    Filesize

    64KB

  • memory/2412-376-0x00000245B8B20000-0x00000245B8B30000-memory.dmp

    Filesize

    64KB

  • memory/2412-383-0x00000245B8B30000-0x00000245B8B40000-memory.dmp

    Filesize

    64KB

  • memory/2412-387-0x00000245B8B40000-0x00000245B8B50000-memory.dmp

    Filesize

    64KB

  • memory/2412-417-0x00000245B8B50000-0x00000245B8B60000-memory.dmp

    Filesize

    64KB

  • memory/2412-437-0x00000245B8B50000-0x00000245B8B60000-memory.dmp

    Filesize

    64KB

  • memory/2412-448-0x00000245B8B60000-0x00000245B8B70000-memory.dmp

    Filesize

    64KB

  • memory/2412-469-0x00000245B8B60000-0x00000245B8B70000-memory.dmp

    Filesize

    64KB

  • memory/2412-477-0x00000245B8B70000-0x00000245B8B80000-memory.dmp

    Filesize

    64KB

  • memory/2412-490-0x00000245B86E0000-0x00000245B8950000-memory.dmp

    Filesize

    2.4MB

  • memory/2412-514-0x00000245B8AC0000-0x00000245B8AD0000-memory.dmp

    Filesize

    64KB

  • memory/2412-513-0x00000245B8AB0000-0x00000245B8AC0000-memory.dmp

    Filesize

    64KB

  • memory/2412-512-0x00000245B8AA0000-0x00000245B8AB0000-memory.dmp

    Filesize

    64KB

  • memory/2412-511-0x00000245B8A90000-0x00000245B8AA0000-memory.dmp

    Filesize

    64KB

  • memory/2412-510-0x00000245B8A80000-0x00000245B8A90000-memory.dmp

    Filesize

    64KB

  • memory/2412-509-0x00000245B8A70000-0x00000245B8A80000-memory.dmp

    Filesize

    64KB

  • memory/2412-508-0x00000245B8A60000-0x00000245B8A70000-memory.dmp

    Filesize

    64KB

  • memory/2412-507-0x00000245B8A50000-0x00000245B8A60000-memory.dmp

    Filesize

    64KB

  • memory/2412-506-0x00000245B8A40000-0x00000245B8A50000-memory.dmp

    Filesize

    64KB

  • memory/2412-505-0x00000245B8A30000-0x00000245B8A40000-memory.dmp

    Filesize

    64KB

  • memory/2412-504-0x00000245B8A20000-0x00000245B8A30000-memory.dmp

    Filesize

    64KB

  • memory/2412-503-0x00000245B8A10000-0x00000245B8A20000-memory.dmp

    Filesize

    64KB

  • memory/2412-502-0x00000245B8A00000-0x00000245B8A10000-memory.dmp

    Filesize

    64KB

  • memory/2412-501-0x00000245B89F0000-0x00000245B8A00000-memory.dmp

    Filesize

    64KB

  • memory/2412-500-0x00000245B89E0000-0x00000245B89F0000-memory.dmp

    Filesize

    64KB

  • memory/2412-499-0x00000245B89D0000-0x00000245B89E0000-memory.dmp

    Filesize

    64KB

  • memory/2412-498-0x00000245B89C0000-0x00000245B89D0000-memory.dmp

    Filesize

    64KB

  • memory/2412-497-0x00000245B89B0000-0x00000245B89C0000-memory.dmp

    Filesize

    64KB

  • memory/2412-496-0x00000245B89A0000-0x00000245B89B0000-memory.dmp

    Filesize

    64KB

  • memory/2412-495-0x00000245B8990000-0x00000245B89A0000-memory.dmp

    Filesize

    64KB

  • memory/2412-494-0x00000245B8980000-0x00000245B8990000-memory.dmp

    Filesize

    64KB

  • memory/2412-493-0x00000245B8970000-0x00000245B8980000-memory.dmp

    Filesize

    64KB

  • memory/2412-492-0x00000245B8960000-0x00000245B8970000-memory.dmp

    Filesize

    64KB

  • memory/2412-491-0x00000245B8950000-0x00000245B8960000-memory.dmp

    Filesize

    64KB