Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    140s
  • max time network
    142s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240802-en
  • resource tags

    arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    02/10/2024, 14:46

General

  • Target

    launch4jc.exe

  • Size

    60KB

  • MD5

    3f949dcf58aa5d6802558c20079d0b08

  • SHA1

    61acea96861f55961b1c22528b4837a8ddc789c1

  • SHA256

    f8d25f5f946e49c0ae039f1237f441d5318a634f2250cd40c10907147ea2fca4

  • SHA512

    65cfe6363e4378ea23b75909166acf670555192e88007bd37fcbcd32152c42ef0b2c9cecec3f6b028c1a770e9eaee970244447bb6f5366eba58cd423b55a5bfa

  • SSDEEP

    1536:4YjzFgzH2HhDKPPHXYTjNxXjcNrmWHs2Esom3P:4YXWWh+XY1lS+c5P

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies registry class 2 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\launch4jc.exe
    "C:\Users\Admin\AppData\Local\Temp\launch4jc.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:2100
    • C:\Program Files\Java\jre-1.8\bin\java.exe
      "C:\Program Files\Java\jre-1.8\bin\java.exe" -jar "C:\Users\Admin\AppData\Local\Temp\launch4j.jar"
      2⤵
      • Modifies registry class
      • Suspicious use of SetWindowsHookEx
      PID:5044

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2100-199-0x0000000000400000-0x000000000041E000-memory.dmp

    Filesize

    120KB

  • memory/5044-2-0x000001F12D260000-0x000001F12D4D0000-memory.dmp

    Filesize

    2.4MB

  • memory/5044-11-0x000001F12BA80000-0x000001F12BA81000-memory.dmp

    Filesize

    4KB

  • memory/5044-19-0x000001F12D4D0000-0x000001F12D4E0000-memory.dmp

    Filesize

    64KB

  • memory/5044-21-0x000001F12D4E0000-0x000001F12D4F0000-memory.dmp

    Filesize

    64KB

  • memory/5044-22-0x000001F12BA80000-0x000001F12BA81000-memory.dmp

    Filesize

    4KB

  • memory/5044-26-0x000001F12D4F0000-0x000001F12D500000-memory.dmp

    Filesize

    64KB

  • memory/5044-28-0x000001F12D510000-0x000001F12D520000-memory.dmp

    Filesize

    64KB

  • memory/5044-27-0x000001F12D500000-0x000001F12D510000-memory.dmp

    Filesize

    64KB

  • memory/5044-32-0x000001F12D530000-0x000001F12D540000-memory.dmp

    Filesize

    64KB

  • memory/5044-31-0x000001F12D520000-0x000001F12D530000-memory.dmp

    Filesize

    64KB

  • memory/5044-34-0x000001F12D540000-0x000001F12D550000-memory.dmp

    Filesize

    64KB

  • memory/5044-36-0x000001F12D550000-0x000001F12D560000-memory.dmp

    Filesize

    64KB

  • memory/5044-39-0x000001F12D260000-0x000001F12D4D0000-memory.dmp

    Filesize

    2.4MB

  • memory/5044-40-0x000001F12D560000-0x000001F12D570000-memory.dmp

    Filesize

    64KB

  • memory/5044-41-0x000001F12D570000-0x000001F12D580000-memory.dmp

    Filesize

    64KB

  • memory/5044-43-0x000001F12BA80000-0x000001F12BA81000-memory.dmp

    Filesize

    4KB

  • memory/5044-47-0x000001F12D580000-0x000001F12D590000-memory.dmp

    Filesize

    64KB

  • memory/5044-46-0x000001F12D4D0000-0x000001F12D4E0000-memory.dmp

    Filesize

    64KB

  • memory/5044-50-0x000001F12D590000-0x000001F12D5A0000-memory.dmp

    Filesize

    64KB

  • memory/5044-49-0x000001F12D4E0000-0x000001F12D4F0000-memory.dmp

    Filesize

    64KB

  • memory/5044-54-0x000001F12D5A0000-0x000001F12D5B0000-memory.dmp

    Filesize

    64KB

  • memory/5044-53-0x000001F12D500000-0x000001F12D510000-memory.dmp

    Filesize

    64KB

  • memory/5044-52-0x000001F12D4F0000-0x000001F12D500000-memory.dmp

    Filesize

    64KB

  • memory/5044-57-0x000001F12D5B0000-0x000001F12D5C0000-memory.dmp

    Filesize

    64KB

  • memory/5044-56-0x000001F12D510000-0x000001F12D520000-memory.dmp

    Filesize

    64KB

  • memory/5044-59-0x000001F12D520000-0x000001F12D530000-memory.dmp

    Filesize

    64KB

  • memory/5044-61-0x000001F12D5C0000-0x000001F12D5D0000-memory.dmp

    Filesize

    64KB

  • memory/5044-60-0x000001F12D530000-0x000001F12D540000-memory.dmp

    Filesize

    64KB

  • memory/5044-65-0x000001F12D5D0000-0x000001F12D5E0000-memory.dmp

    Filesize

    64KB

  • memory/5044-68-0x000001F12D5E0000-0x000001F12D5F0000-memory.dmp

    Filesize

    64KB

  • memory/5044-67-0x000001F12D540000-0x000001F12D550000-memory.dmp

    Filesize

    64KB

  • memory/5044-73-0x000001F12D5F0000-0x000001F12D600000-memory.dmp

    Filesize

    64KB

  • memory/5044-72-0x000001F12D550000-0x000001F12D560000-memory.dmp

    Filesize

    64KB

  • memory/5044-75-0x000001F12D560000-0x000001F12D570000-memory.dmp

    Filesize

    64KB

  • memory/5044-76-0x000001F12D600000-0x000001F12D610000-memory.dmp

    Filesize

    64KB

  • memory/5044-79-0x000001F12D610000-0x000001F12D620000-memory.dmp

    Filesize

    64KB

  • memory/5044-78-0x000001F12D570000-0x000001F12D580000-memory.dmp

    Filesize

    64KB

  • memory/5044-81-0x000001F12D580000-0x000001F12D590000-memory.dmp

    Filesize

    64KB

  • memory/5044-82-0x000001F12D620000-0x000001F12D630000-memory.dmp

    Filesize

    64KB

  • memory/5044-85-0x000001F12D630000-0x000001F12D640000-memory.dmp

    Filesize

    64KB

  • memory/5044-84-0x000001F12D590000-0x000001F12D5A0000-memory.dmp

    Filesize

    64KB

  • memory/5044-87-0x000001F12D5A0000-0x000001F12D5B0000-memory.dmp

    Filesize

    64KB

  • memory/5044-88-0x000001F12D640000-0x000001F12D650000-memory.dmp

    Filesize

    64KB

  • memory/5044-92-0x000001F12D650000-0x000001F12D660000-memory.dmp

    Filesize

    64KB

  • memory/5044-91-0x000001F12D5B0000-0x000001F12D5C0000-memory.dmp

    Filesize

    64KB

  • memory/5044-95-0x000001F12D660000-0x000001F12D670000-memory.dmp

    Filesize

    64KB

  • memory/5044-94-0x000001F12D5C0000-0x000001F12D5D0000-memory.dmp

    Filesize

    64KB

  • memory/5044-98-0x000001F12D670000-0x000001F12D680000-memory.dmp

    Filesize

    64KB

  • memory/5044-97-0x000001F12D5D0000-0x000001F12D5E0000-memory.dmp

    Filesize

    64KB

  • memory/5044-100-0x000001F12BA80000-0x000001F12BA81000-memory.dmp

    Filesize

    4KB

  • memory/5044-102-0x000001F12D680000-0x000001F12D690000-memory.dmp

    Filesize

    64KB

  • memory/5044-101-0x000001F12D5E0000-0x000001F12D5F0000-memory.dmp

    Filesize

    64KB

  • memory/5044-108-0x000001F12D6A0000-0x000001F12D6B0000-memory.dmp

    Filesize

    64KB

  • memory/5044-107-0x000001F12D600000-0x000001F12D610000-memory.dmp

    Filesize

    64KB

  • memory/5044-106-0x000001F12D690000-0x000001F12D6A0000-memory.dmp

    Filesize

    64KB

  • memory/5044-105-0x000001F12D5F0000-0x000001F12D600000-memory.dmp

    Filesize

    64KB

  • memory/5044-111-0x000001F12D6B0000-0x000001F12D6C0000-memory.dmp

    Filesize

    64KB

  • memory/5044-110-0x000001F12D610000-0x000001F12D620000-memory.dmp

    Filesize

    64KB

  • memory/5044-117-0x000001F12D6D0000-0x000001F12D6E0000-memory.dmp

    Filesize

    64KB

  • memory/5044-116-0x000001F12D630000-0x000001F12D640000-memory.dmp

    Filesize

    64KB

  • memory/5044-115-0x000001F12D6C0000-0x000001F12D6D0000-memory.dmp

    Filesize

    64KB

  • memory/5044-114-0x000001F12D620000-0x000001F12D630000-memory.dmp

    Filesize

    64KB

  • memory/5044-121-0x000001F12D640000-0x000001F12D650000-memory.dmp

    Filesize

    64KB

  • memory/5044-122-0x000001F12D6E0000-0x000001F12D6F0000-memory.dmp

    Filesize

    64KB

  • memory/5044-126-0x000001F12D6F0000-0x000001F12D700000-memory.dmp

    Filesize

    64KB

  • memory/5044-125-0x000001F12D650000-0x000001F12D660000-memory.dmp

    Filesize

    64KB

  • memory/5044-127-0x000001F12D660000-0x000001F12D670000-memory.dmp

    Filesize

    64KB

  • memory/5044-128-0x000001F12D700000-0x000001F12D710000-memory.dmp

    Filesize

    64KB

  • memory/5044-130-0x000001F12D670000-0x000001F12D680000-memory.dmp

    Filesize

    64KB

  • memory/5044-131-0x000001F12D710000-0x000001F12D720000-memory.dmp

    Filesize

    64KB

  • memory/5044-136-0x000001F12D730000-0x000001F12D740000-memory.dmp

    Filesize

    64KB

  • memory/5044-137-0x000001F12D690000-0x000001F12D6A0000-memory.dmp

    Filesize

    64KB

  • memory/5044-135-0x000001F12D720000-0x000001F12D730000-memory.dmp

    Filesize

    64KB

  • memory/5044-134-0x000001F12D680000-0x000001F12D690000-memory.dmp

    Filesize

    64KB

  • memory/5044-140-0x000001F12D740000-0x000001F12D750000-memory.dmp

    Filesize

    64KB

  • memory/5044-139-0x000001F12D6A0000-0x000001F12D6B0000-memory.dmp

    Filesize

    64KB

  • memory/5044-144-0x000001F12D6B0000-0x000001F12D6C0000-memory.dmp

    Filesize

    64KB

  • memory/5044-151-0x000001F12D770000-0x000001F12D780000-memory.dmp

    Filesize

    64KB

  • memory/5044-153-0x000001F12D6E0000-0x000001F12D6F0000-memory.dmp

    Filesize

    64KB

  • memory/5044-152-0x000001F12D780000-0x000001F12D790000-memory.dmp

    Filesize

    64KB

  • memory/5044-150-0x000001F12D6D0000-0x000001F12D6E0000-memory.dmp

    Filesize

    64KB

  • memory/5044-147-0x000001F12D6C0000-0x000001F12D6D0000-memory.dmp

    Filesize

    64KB

  • memory/5044-146-0x000001F12D760000-0x000001F12D770000-memory.dmp

    Filesize

    64KB

  • memory/5044-145-0x000001F12D750000-0x000001F12D760000-memory.dmp

    Filesize

    64KB

  • memory/5044-155-0x000001F12BA80000-0x000001F12BA81000-memory.dmp

    Filesize

    4KB

  • memory/5044-158-0x000001F12D790000-0x000001F12D7A0000-memory.dmp

    Filesize

    64KB

  • memory/5044-157-0x000001F12D6F0000-0x000001F12D700000-memory.dmp

    Filesize

    64KB

  • memory/5044-161-0x000001F12D7A0000-0x000001F12D7B0000-memory.dmp

    Filesize

    64KB

  • memory/5044-160-0x000001F12D700000-0x000001F12D710000-memory.dmp

    Filesize

    64KB

  • memory/5044-165-0x000001F12D7B0000-0x000001F12D7C0000-memory.dmp

    Filesize

    64KB

  • memory/5044-164-0x000001F12D710000-0x000001F12D720000-memory.dmp

    Filesize

    64KB

  • memory/5044-169-0x000001F12D7C0000-0x000001F12D7D0000-memory.dmp

    Filesize

    64KB

  • memory/5044-168-0x000001F12D730000-0x000001F12D740000-memory.dmp

    Filesize

    64KB

  • memory/5044-167-0x000001F12D720000-0x000001F12D730000-memory.dmp

    Filesize

    64KB

  • memory/5044-174-0x000001F12D7E0000-0x000001F12D7F0000-memory.dmp

    Filesize

    64KB

  • memory/5044-173-0x000001F12D740000-0x000001F12D750000-memory.dmp

    Filesize

    64KB

  • memory/5044-172-0x000001F12D7D0000-0x000001F12D7E0000-memory.dmp

    Filesize

    64KB

  • memory/5044-176-0x000001F12BA80000-0x000001F12BA81000-memory.dmp

    Filesize

    4KB

  • memory/5044-181-0x000001F12D7F0000-0x000001F12D800000-memory.dmp

    Filesize

    64KB

  • memory/5044-180-0x000001F12D760000-0x000001F12D770000-memory.dmp

    Filesize

    64KB

  • memory/5044-179-0x000001F12D750000-0x000001F12D760000-memory.dmp

    Filesize

    64KB

  • memory/5044-183-0x000001F12D800000-0x000001F12D810000-memory.dmp

    Filesize

    64KB

  • memory/5044-204-0x000001F12BA80000-0x000001F12BA81000-memory.dmp

    Filesize

    4KB