Analysis

  • max time kernel
    149s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20/10/2024, 22:03

General

  • Target

    sga.jar

  • Size

    639KB

  • MD5

    708384ec7862f5d3e4866a0988c79c8b

  • SHA1

    c5b8b09d1594fbffd8233233c59f0c143eaa6154

  • SHA256

    b44dac1dd0b9cb11a5561195dfbd6c9f977cf27aadedb25bd9cca4775794c24b

  • SHA512

    3d4c4327071d0706c5a9762db3c4ee1060012c05b25bad00e61df38fb4e8d81317999d106ca7352d0697318f62fd68eae6aca875b2ed1560e8ef80f31fd584ad

  • SSDEEP

    12288:6vHFQR/PflwPt4VJotwzgO/TRz+xDQNKfmgyJyRxg3UuU2JsSetDEx:6vlQBlwV4PbzgO9eWKfPYZUuJJvetDEx

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\sga.jar
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3940

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3940-2-0x0000029D01410000-0x0000029D01680000-memory.dmp

    Filesize

    2.4MB

  • memory/3940-15-0x0000029D01680000-0x0000029D01690000-memory.dmp

    Filesize

    64KB

  • memory/3940-17-0x0000029D01690000-0x0000029D016A0000-memory.dmp

    Filesize

    64KB

  • memory/3940-20-0x0000029D016A0000-0x0000029D016B0000-memory.dmp

    Filesize

    64KB

  • memory/3940-21-0x0000029D016B0000-0x0000029D016C0000-memory.dmp

    Filesize

    64KB

  • memory/3940-23-0x0000029D016C0000-0x0000029D016D0000-memory.dmp

    Filesize

    64KB

  • memory/3940-25-0x0000029D016D0000-0x0000029D016E0000-memory.dmp

    Filesize

    64KB

  • memory/3940-26-0x0000029D7F2B0000-0x0000029D7F2B1000-memory.dmp

    Filesize

    4KB

  • memory/3940-28-0x0000029D016E0000-0x0000029D016F0000-memory.dmp

    Filesize

    64KB

  • memory/3940-30-0x0000029D016F0000-0x0000029D01700000-memory.dmp

    Filesize

    64KB

  • memory/3940-33-0x0000029D7F2B0000-0x0000029D7F2B1000-memory.dmp

    Filesize

    4KB

  • memory/3940-34-0x0000029D01410000-0x0000029D01680000-memory.dmp

    Filesize

    2.4MB

  • memory/3940-38-0x0000029D01700000-0x0000029D01710000-memory.dmp

    Filesize

    64KB

  • memory/3940-37-0x0000029D01680000-0x0000029D01690000-memory.dmp

    Filesize

    64KB

  • memory/3940-40-0x0000029D01690000-0x0000029D016A0000-memory.dmp

    Filesize

    64KB

  • memory/3940-42-0x0000029D016A0000-0x0000029D016B0000-memory.dmp

    Filesize

    64KB

  • memory/3940-43-0x0000029D016B0000-0x0000029D016C0000-memory.dmp

    Filesize

    64KB

  • memory/3940-44-0x0000029D016C0000-0x0000029D016D0000-memory.dmp

    Filesize

    64KB

  • memory/3940-45-0x0000029D016D0000-0x0000029D016E0000-memory.dmp

    Filesize

    64KB

  • memory/3940-46-0x0000029D016E0000-0x0000029D016F0000-memory.dmp

    Filesize

    64KB

  • memory/3940-47-0x0000029D016F0000-0x0000029D01700000-memory.dmp

    Filesize

    64KB

  • memory/3940-48-0x0000029D01700000-0x0000029D01710000-memory.dmp

    Filesize

    64KB

  • memory/3940-50-0x0000029D01710000-0x0000029D01720000-memory.dmp

    Filesize

    64KB

  • memory/3940-51-0x0000029D01710000-0x0000029D01720000-memory.dmp

    Filesize

    64KB

  • memory/3940-53-0x0000029D01720000-0x0000029D01730000-memory.dmp

    Filesize

    64KB

  • memory/3940-54-0x0000029D01720000-0x0000029D01730000-memory.dmp

    Filesize

    64KB

  • memory/3940-57-0x0000029D01730000-0x0000029D01740000-memory.dmp

    Filesize

    64KB

  • memory/3940-59-0x0000029D01730000-0x0000029D01740000-memory.dmp

    Filesize

    64KB