Analysis

  • max time kernel
    149s
  • max time network
    95s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/10/2024, 15:43

General

  • Target

    forge-1.19.2-43.4.4-installer.jar

  • Size

    6.8MB

  • MD5

    aabf93bfa4dae087e9a34605adebcec2

  • SHA1

    6b63a94617d2ca73f5bb73066038258091bd5758

  • SHA256

    d8ca12dd7c46a268e1dbdf9b3657d77a78010b39149cbe839a1ad796f8289bd8

  • SHA512

    73aaa0b8e3d5468017cb07ddf14b4bf87584e519f79daff0bbd7dd632a30d29b0f4b7aed5379732d5f49a1e2a6a08ab2426758be56de328430e5aae8cf4a8e40

  • SSDEEP

    196608:eYMdZU3z1ozEkghkabUPmsCa1r1hlv1h7bNnKyDOij:DMdGxXzxz01r1BtbNnKyDO4

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\forge-1.19.2-43.4.4-installer.jar
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:184

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/184-2-0x0000028A33D50000-0x0000028A33FC0000-memory.dmp

    Filesize

    2.4MB

  • memory/184-11-0x0000028A324B0000-0x0000028A324B1000-memory.dmp

    Filesize

    4KB

  • memory/184-14-0x0000028A33FC0000-0x0000028A33FD0000-memory.dmp

    Filesize

    64KB

  • memory/184-16-0x0000028A33FD0000-0x0000028A33FE0000-memory.dmp

    Filesize

    64KB

  • memory/184-19-0x0000028A33FE0000-0x0000028A33FF0000-memory.dmp

    Filesize

    64KB

  • memory/184-20-0x0000028A33FF0000-0x0000028A34000000-memory.dmp

    Filesize

    64KB

  • memory/184-22-0x0000028A34000000-0x0000028A34010000-memory.dmp

    Filesize

    64KB

  • memory/184-25-0x0000028A34010000-0x0000028A34020000-memory.dmp

    Filesize

    64KB

  • memory/184-28-0x0000028A34020000-0x0000028A34030000-memory.dmp

    Filesize

    64KB

  • memory/184-29-0x0000028A34030000-0x0000028A34040000-memory.dmp

    Filesize

    64KB

  • memory/184-32-0x0000028A34040000-0x0000028A34050000-memory.dmp

    Filesize

    64KB

  • memory/184-34-0x0000028A33D50000-0x0000028A33FC0000-memory.dmp

    Filesize

    2.4MB

  • memory/184-37-0x0000028A33FC0000-0x0000028A33FD0000-memory.dmp

    Filesize

    64KB

  • memory/184-36-0x0000028A34060000-0x0000028A34070000-memory.dmp

    Filesize

    64KB

  • memory/184-35-0x0000028A34050000-0x0000028A34060000-memory.dmp

    Filesize

    64KB

  • memory/184-40-0x0000028A34070000-0x0000028A34080000-memory.dmp

    Filesize

    64KB

  • memory/184-39-0x0000028A33FD0000-0x0000028A33FE0000-memory.dmp

    Filesize

    64KB

  • memory/184-45-0x0000028A34080000-0x0000028A34090000-memory.dmp

    Filesize

    64KB

  • memory/184-44-0x0000028A33FE0000-0x0000028A33FF0000-memory.dmp

    Filesize

    64KB

  • memory/184-47-0x0000028A34090000-0x0000028A340A0000-memory.dmp

    Filesize

    64KB

  • memory/184-46-0x0000028A33FF0000-0x0000028A34000000-memory.dmp

    Filesize

    64KB

  • memory/184-50-0x0000028A34000000-0x0000028A34010000-memory.dmp

    Filesize

    64KB

  • memory/184-51-0x0000028A340A0000-0x0000028A340B0000-memory.dmp

    Filesize

    64KB

  • memory/184-52-0x0000028A34010000-0x0000028A34020000-memory.dmp

    Filesize

    64KB

  • memory/184-53-0x0000028A340B0000-0x0000028A340C0000-memory.dmp

    Filesize

    64KB

  • memory/184-57-0x0000028A340C0000-0x0000028A340D0000-memory.dmp

    Filesize

    64KB

  • memory/184-56-0x0000028A34020000-0x0000028A34030000-memory.dmp

    Filesize

    64KB

  • memory/184-60-0x0000028A340D0000-0x0000028A340E0000-memory.dmp

    Filesize

    64KB

  • memory/184-59-0x0000028A34040000-0x0000028A34050000-memory.dmp

    Filesize

    64KB

  • memory/184-58-0x0000028A34030000-0x0000028A34040000-memory.dmp

    Filesize

    64KB

  • memory/184-64-0x0000028A340E0000-0x0000028A340F0000-memory.dmp

    Filesize

    64KB

  • memory/184-70-0x0000028A340F0000-0x0000028A34100000-memory.dmp

    Filesize

    64KB

  • memory/184-69-0x0000028A34050000-0x0000028A34060000-memory.dmp

    Filesize

    64KB

  • memory/184-74-0x0000028A34100000-0x0000028A34110000-memory.dmp

    Filesize

    64KB

  • memory/184-76-0x0000028A34070000-0x0000028A34080000-memory.dmp

    Filesize

    64KB

  • memory/184-75-0x0000028A34110000-0x0000028A34120000-memory.dmp

    Filesize

    64KB

  • memory/184-73-0x0000028A34060000-0x0000028A34070000-memory.dmp

    Filesize

    64KB

  • memory/184-79-0x0000028A34080000-0x0000028A34090000-memory.dmp

    Filesize

    64KB

  • memory/184-80-0x0000028A34120000-0x0000028A34130000-memory.dmp

    Filesize

    64KB

  • memory/184-81-0x0000028A34090000-0x0000028A340A0000-memory.dmp

    Filesize

    64KB

  • memory/184-82-0x0000028A34130000-0x0000028A34140000-memory.dmp

    Filesize

    64KB

  • memory/184-85-0x0000028A34140000-0x0000028A34150000-memory.dmp

    Filesize

    64KB

  • memory/184-84-0x0000028A340A0000-0x0000028A340B0000-memory.dmp

    Filesize

    64KB

  • memory/184-88-0x0000028A34150000-0x0000028A34160000-memory.dmp

    Filesize

    64KB

  • memory/184-87-0x0000028A340B0000-0x0000028A340C0000-memory.dmp

    Filesize

    64KB

  • memory/184-91-0x0000028A324B0000-0x0000028A324B1000-memory.dmp

    Filesize

    4KB

  • memory/184-93-0x0000028A34160000-0x0000028A34170000-memory.dmp

    Filesize

    64KB

  • memory/184-92-0x0000028A340C0000-0x0000028A340D0000-memory.dmp

    Filesize

    64KB

  • memory/184-97-0x0000028A34170000-0x0000028A34180000-memory.dmp

    Filesize

    64KB

  • memory/184-96-0x0000028A340D0000-0x0000028A340E0000-memory.dmp

    Filesize

    64KB

  • memory/184-99-0x0000028A324B0000-0x0000028A324B1000-memory.dmp

    Filesize

    4KB

  • memory/184-104-0x0000028A34180000-0x0000028A34190000-memory.dmp

    Filesize

    64KB

  • memory/184-103-0x0000028A340E0000-0x0000028A340F0000-memory.dmp

    Filesize

    64KB

  • memory/184-106-0x0000028A340F0000-0x0000028A34100000-memory.dmp

    Filesize

    64KB

  • memory/184-107-0x0000028A34190000-0x0000028A341A0000-memory.dmp

    Filesize

    64KB

  • memory/184-111-0x0000028A341A0000-0x0000028A341B0000-memory.dmp

    Filesize

    64KB

  • memory/184-110-0x0000028A34110000-0x0000028A34120000-memory.dmp

    Filesize

    64KB

  • memory/184-109-0x0000028A34100000-0x0000028A34110000-memory.dmp

    Filesize

    64KB

  • memory/184-113-0x0000028A341B0000-0x0000028A341C0000-memory.dmp

    Filesize

    64KB

  • memory/184-116-0x0000028A341C0000-0x0000028A341D0000-memory.dmp

    Filesize

    64KB

  • memory/184-115-0x0000028A34120000-0x0000028A34130000-memory.dmp

    Filesize

    64KB

  • memory/184-119-0x0000028A341D0000-0x0000028A341E0000-memory.dmp

    Filesize

    64KB

  • memory/184-118-0x0000028A34130000-0x0000028A34140000-memory.dmp

    Filesize

    64KB

  • memory/184-121-0x0000028A34140000-0x0000028A34150000-memory.dmp

    Filesize

    64KB

  • memory/184-122-0x0000028A341E0000-0x0000028A341F0000-memory.dmp

    Filesize

    64KB

  • memory/184-125-0x0000028A341F0000-0x0000028A34200000-memory.dmp

    Filesize

    64KB

  • memory/184-124-0x0000028A34150000-0x0000028A34160000-memory.dmp

    Filesize

    64KB

  • memory/184-129-0x0000028A34200000-0x0000028A34210000-memory.dmp

    Filesize

    64KB

  • memory/184-128-0x0000028A34160000-0x0000028A34170000-memory.dmp

    Filesize

    64KB

  • memory/184-131-0x0000028A34210000-0x0000028A34220000-memory.dmp

    Filesize

    64KB

  • memory/184-130-0x0000028A34170000-0x0000028A34180000-memory.dmp

    Filesize

    64KB

  • memory/184-133-0x0000028A34180000-0x0000028A34190000-memory.dmp

    Filesize

    64KB

  • memory/184-134-0x0000028A34220000-0x0000028A34230000-memory.dmp

    Filesize

    64KB

  • memory/184-138-0x0000028A324B0000-0x0000028A324B1000-memory.dmp

    Filesize

    4KB

  • memory/184-140-0x0000028A34190000-0x0000028A341A0000-memory.dmp

    Filesize

    64KB

  • memory/184-141-0x0000028A34230000-0x0000028A34240000-memory.dmp

    Filesize

    64KB

  • memory/184-145-0x0000028A341A0000-0x0000028A341B0000-memory.dmp

    Filesize

    64KB

  • memory/184-146-0x0000028A34240000-0x0000028A34250000-memory.dmp

    Filesize

    64KB

  • memory/184-151-0x0000028A341B0000-0x0000028A341C0000-memory.dmp

    Filesize

    64KB

  • memory/184-152-0x0000028A34250000-0x0000028A34260000-memory.dmp

    Filesize

    64KB

  • memory/184-156-0x0000028A341C0000-0x0000028A341D0000-memory.dmp

    Filesize

    64KB

  • memory/184-157-0x0000028A34260000-0x0000028A34270000-memory.dmp

    Filesize

    64KB

  • memory/184-158-0x0000028A341D0000-0x0000028A341E0000-memory.dmp

    Filesize

    64KB

  • memory/184-159-0x0000028A34270000-0x0000028A34280000-memory.dmp

    Filesize

    64KB

  • memory/184-162-0x0000028A34280000-0x0000028A34290000-memory.dmp

    Filesize

    64KB

  • memory/184-161-0x0000028A341E0000-0x0000028A341F0000-memory.dmp

    Filesize

    64KB

  • memory/184-164-0x0000028A341F0000-0x0000028A34200000-memory.dmp

    Filesize

    64KB

  • memory/184-165-0x0000028A34290000-0x0000028A342A0000-memory.dmp

    Filesize

    64KB

  • memory/184-168-0x0000028A342A0000-0x0000028A342B0000-memory.dmp

    Filesize

    64KB

  • memory/184-167-0x0000028A34200000-0x0000028A34210000-memory.dmp

    Filesize

    64KB

  • memory/184-170-0x0000028A34210000-0x0000028A34220000-memory.dmp

    Filesize

    64KB

  • memory/184-171-0x0000028A342B0000-0x0000028A342C0000-memory.dmp

    Filesize

    64KB

  • memory/184-174-0x0000028A342C0000-0x0000028A342D0000-memory.dmp

    Filesize

    64KB

  • memory/184-173-0x0000028A34220000-0x0000028A34230000-memory.dmp

    Filesize

    64KB

  • memory/184-179-0x0000028A34230000-0x0000028A34240000-memory.dmp

    Filesize

    64KB

  • memory/184-180-0x0000028A342D0000-0x0000028A342E0000-memory.dmp

    Filesize

    64KB

  • memory/184-182-0x0000028A34240000-0x0000028A34250000-memory.dmp

    Filesize

    64KB

  • memory/184-183-0x0000028A342E0000-0x0000028A342F0000-memory.dmp

    Filesize

    64KB

  • memory/184-186-0x0000028A342F0000-0x0000028A34300000-memory.dmp

    Filesize

    64KB

  • memory/184-185-0x0000028A34250000-0x0000028A34260000-memory.dmp

    Filesize

    64KB

  • memory/184-187-0x0000028A324B0000-0x0000028A324B1000-memory.dmp

    Filesize

    4KB

  • memory/184-223-0x0000028A324B0000-0x0000028A324B1000-memory.dmp

    Filesize

    4KB