Analysis

  • max time kernel
    85s
  • max time network
    75s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/11/2024, 11:49

General

  • Target

    Installer.jar

  • Size

    18.4MB

  • MD5

    eaf63a5d5730fcf1c8cc5cf27354e911

  • SHA1

    f22c4b0a9c608ec00b6b84cabe434a240063e642

  • SHA256

    f51e4d9f7907dd07ee264439433e0051c5136712cbbb0cc5a81be3b7023df585

  • SHA512

    2dca09810b38664f23ca89d72f24e632d5c74874b4d9d0174dce86c30126ee1296a281da768b228840f0160ddb331e48591799799cadbf5a02d294e914a09a80

  • SSDEEP

    393216:p6aRouWO9ojV8LJxXlReGOHsxoU+REFJAHYyjFRyHJpy/LAfIiMYX/rQ:PRQ+oqdxVReGksiJL4CFcH2EX/s

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Modifies registry class 2 IoCs
  • Suspicious use of SetWindowsHookEx 8 IoCs

Processes

  • C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\Installer.jar
    1⤵
    • Loads dropped DLL
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:1736

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\flatlaf.temp\flatlaf-windows-x86_64-4715479154900.dll

    Filesize

    21KB

    MD5

    4ca3290a99adadde557930cd481d7539

    SHA1

    26034442a76131dd3d37c8f28b6e9bebc7c1fe7c

    SHA256

    dd130c68dc36bcedbe51a6b8ec3b3358a460d45952f6280e12331f48850b6b3b

    SHA512

    9341c60f92dd3f89f82555055924bdae6fcce1e4cd13a7dde5129ebdce04bae377292237a2ed6c3e7623b242e82b01c7ed1717af4d7db8ca473e9fd7b7b190d5

  • memory/1736-2-0x000001DF00000000-0x000001DF00270000-memory.dmp

    Filesize

    2.4MB

  • memory/1736-14-0x000001DF7EBE0000-0x000001DF7EBE1000-memory.dmp

    Filesize

    4KB

  • memory/1736-20-0x000001DF7EBE0000-0x000001DF7EBE1000-memory.dmp

    Filesize

    4KB

  • memory/1736-29-0x000001DF00280000-0x000001DF00290000-memory.dmp

    Filesize

    64KB

  • memory/1736-28-0x000001DF00270000-0x000001DF00280000-memory.dmp

    Filesize

    64KB

  • memory/1736-31-0x000001DF00290000-0x000001DF002A0000-memory.dmp

    Filesize

    64KB

  • memory/1736-33-0x000001DF002A0000-0x000001DF002B0000-memory.dmp

    Filesize

    64KB

  • memory/1736-35-0x000001DF002B0000-0x000001DF002C0000-memory.dmp

    Filesize

    64KB

  • memory/1736-39-0x000001DF002C0000-0x000001DF002D0000-memory.dmp

    Filesize

    64KB

  • memory/1736-40-0x000001DF002D0000-0x000001DF002E0000-memory.dmp

    Filesize

    64KB

  • memory/1736-43-0x000001DF002E0000-0x000001DF002F0000-memory.dmp

    Filesize

    64KB

  • memory/1736-46-0x000001DF002F0000-0x000001DF00300000-memory.dmp

    Filesize

    64KB

  • memory/1736-45-0x000001DF00000000-0x000001DF00270000-memory.dmp

    Filesize

    2.4MB

  • memory/1736-48-0x000001DF00300000-0x000001DF00310000-memory.dmp

    Filesize

    64KB

  • memory/1736-53-0x000001DF00310000-0x000001DF00320000-memory.dmp

    Filesize

    64KB

  • memory/1736-52-0x000001DF00280000-0x000001DF00290000-memory.dmp

    Filesize

    64KB

  • memory/1736-51-0x000001DF00270000-0x000001DF00280000-memory.dmp

    Filesize

    64KB

  • memory/1736-55-0x000001DF7EBE0000-0x000001DF7EBE1000-memory.dmp

    Filesize

    4KB

  • memory/1736-57-0x000001DF00320000-0x000001DF00330000-memory.dmp

    Filesize

    64KB

  • memory/1736-59-0x000001DF00330000-0x000001DF00340000-memory.dmp

    Filesize

    64KB

  • memory/1736-58-0x000001DF00290000-0x000001DF002A0000-memory.dmp

    Filesize

    64KB

  • memory/1736-61-0x000001DF002A0000-0x000001DF002B0000-memory.dmp

    Filesize

    64KB

  • memory/1736-62-0x000001DF002B0000-0x000001DF002C0000-memory.dmp

    Filesize

    64KB

  • memory/1736-64-0x000001DF002C0000-0x000001DF002D0000-memory.dmp

    Filesize

    64KB

  • memory/1736-65-0x000001DF002D0000-0x000001DF002E0000-memory.dmp

    Filesize

    64KB

  • memory/1736-66-0x000001DF002E0000-0x000001DF002F0000-memory.dmp

    Filesize

    64KB

  • memory/1736-67-0x000001DF002F0000-0x000001DF00300000-memory.dmp

    Filesize

    64KB

  • memory/1736-68-0x000001DF00300000-0x000001DF00310000-memory.dmp

    Filesize

    64KB

  • memory/1736-69-0x000001DF00310000-0x000001DF00320000-memory.dmp

    Filesize

    64KB

  • memory/1736-70-0x000001DF00320000-0x000001DF00330000-memory.dmp

    Filesize

    64KB

  • memory/1736-71-0x000001DF00330000-0x000001DF00340000-memory.dmp

    Filesize

    64KB

  • memory/1736-73-0x000001DF00340000-0x000001DF00350000-memory.dmp

    Filesize

    64KB

  • memory/1736-74-0x000001DF00340000-0x000001DF00350000-memory.dmp

    Filesize

    64KB

  • memory/1736-76-0x000001DF00350000-0x000001DF00360000-memory.dmp

    Filesize

    64KB

  • memory/1736-80-0x000001DF00360000-0x000001DF00370000-memory.dmp

    Filesize

    64KB

  • memory/1736-83-0x000001DF00370000-0x000001DF00380000-memory.dmp

    Filesize

    64KB

  • memory/1736-86-0x000001DF00380000-0x000001DF00390000-memory.dmp

    Filesize

    64KB

  • memory/1736-91-0x000001DF00390000-0x000001DF003A0000-memory.dmp

    Filesize

    64KB

  • memory/1736-93-0x000001DF7EBE0000-0x000001DF7EBE1000-memory.dmp

    Filesize

    4KB

  • memory/1736-94-0x000001DF003A0000-0x000001DF003B0000-memory.dmp

    Filesize

    64KB

  • memory/1736-98-0x000001DF00350000-0x000001DF00360000-memory.dmp

    Filesize

    64KB

  • memory/1736-99-0x000001DF003B0000-0x000001DF003C0000-memory.dmp

    Filesize

    64KB

  • memory/1736-101-0x000001DF003C0000-0x000001DF003D0000-memory.dmp

    Filesize

    64KB

  • memory/1736-103-0x000001DF00360000-0x000001DF00370000-memory.dmp

    Filesize

    64KB

  • memory/1736-104-0x000001DF003D0000-0x000001DF003E0000-memory.dmp

    Filesize

    64KB

  • memory/1736-110-0x000001DF00370000-0x000001DF00380000-memory.dmp

    Filesize

    64KB

  • memory/1736-108-0x000001DF003E0000-0x000001DF003F0000-memory.dmp

    Filesize

    64KB

  • memory/1736-109-0x000001DF003F0000-0x000001DF00400000-memory.dmp

    Filesize

    64KB

  • memory/1736-113-0x000001DF00400000-0x000001DF00410000-memory.dmp

    Filesize

    64KB

  • memory/1736-115-0x000001DF00380000-0x000001DF00390000-memory.dmp

    Filesize

    64KB

  • memory/1736-116-0x000001DF00410000-0x000001DF00420000-memory.dmp

    Filesize

    64KB

  • memory/1736-120-0x000001DF00420000-0x000001DF00430000-memory.dmp

    Filesize

    64KB

  • memory/1736-119-0x000001DF00390000-0x000001DF003A0000-memory.dmp

    Filesize

    64KB

  • memory/1736-122-0x000001DF003A0000-0x000001DF003B0000-memory.dmp

    Filesize

    64KB

  • memory/1736-123-0x000001DF00430000-0x000001DF00440000-memory.dmp

    Filesize

    64KB

  • memory/1736-125-0x000001DF00440000-0x000001DF00450000-memory.dmp

    Filesize

    64KB

  • memory/1736-126-0x000001DF7EBE0000-0x000001DF7EBE1000-memory.dmp

    Filesize

    4KB

  • memory/1736-127-0x000001DF7EBE0000-0x000001DF7EBE1000-memory.dmp

    Filesize

    4KB

  • memory/1736-130-0x000001DF00450000-0x000001DF00460000-memory.dmp

    Filesize

    64KB

  • memory/1736-129-0x000001DF003B0000-0x000001DF003C0000-memory.dmp

    Filesize

    64KB

  • memory/1736-133-0x000001DF00460000-0x000001DF00470000-memory.dmp

    Filesize

    64KB

  • memory/1736-132-0x000001DF003C0000-0x000001DF003D0000-memory.dmp

    Filesize

    64KB

  • memory/1736-140-0x000001DF7EBE0000-0x000001DF7EBE1000-memory.dmp

    Filesize

    4KB

  • memory/1736-137-0x000001DF7EBE0000-0x000001DF7EBE1000-memory.dmp

    Filesize

    4KB

  • memory/1736-135-0x000001DF7EBE0000-0x000001DF7EBE1000-memory.dmp

    Filesize

    4KB

  • memory/1736-143-0x000001DF00470000-0x000001DF00480000-memory.dmp

    Filesize

    64KB

  • memory/1736-142-0x000001DF003D0000-0x000001DF003E0000-memory.dmp

    Filesize

    64KB

  • memory/1736-145-0x000001DF7EBE0000-0x000001DF7EBE1000-memory.dmp

    Filesize

    4KB

  • memory/1736-147-0x000001DF7EBE0000-0x000001DF7EBE1000-memory.dmp

    Filesize

    4KB

  • memory/1736-144-0x000001DF7EBE0000-0x000001DF7EBE1000-memory.dmp

    Filesize

    4KB

  • memory/1736-150-0x000001DF7EBE0000-0x000001DF7EBE1000-memory.dmp

    Filesize

    4KB

  • memory/1736-151-0x000001DF003E0000-0x000001DF003F0000-memory.dmp

    Filesize

    64KB

  • memory/1736-153-0x000001DF00480000-0x000001DF00490000-memory.dmp

    Filesize

    64KB

  • memory/1736-152-0x000001DF003F0000-0x000001DF00400000-memory.dmp

    Filesize

    64KB

  • memory/1736-155-0x000001DF00490000-0x000001DF004A0000-memory.dmp

    Filesize

    64KB

  • memory/1736-159-0x000001DF004A0000-0x000001DF004B0000-memory.dmp

    Filesize

    64KB

  • memory/1736-158-0x000001DF00400000-0x000001DF00410000-memory.dmp

    Filesize

    64KB

  • memory/1736-162-0x000001DF004B0000-0x000001DF004C0000-memory.dmp

    Filesize

    64KB

  • memory/1736-165-0x000001DF004C0000-0x000001DF004D0000-memory.dmp

    Filesize

    64KB

  • memory/1736-164-0x000001DF00420000-0x000001DF00430000-memory.dmp

    Filesize

    64KB

  • memory/1736-161-0x000001DF00410000-0x000001DF00420000-memory.dmp

    Filesize

    64KB

  • memory/1736-167-0x000001DF00430000-0x000001DF00440000-memory.dmp

    Filesize

    64KB

  • memory/1736-170-0x000001DF004D0000-0x000001DF004E0000-memory.dmp

    Filesize

    64KB

  • memory/1736-169-0x000001DF00440000-0x000001DF00450000-memory.dmp

    Filesize

    64KB

  • memory/1736-173-0x000001DF004E0000-0x000001DF004F0000-memory.dmp

    Filesize

    64KB

  • memory/1736-172-0x000001DF00450000-0x000001DF00460000-memory.dmp

    Filesize

    64KB

  • memory/1736-177-0x000001DF004F0000-0x000001DF00500000-memory.dmp

    Filesize

    64KB

  • memory/1736-176-0x000001DF00460000-0x000001DF00470000-memory.dmp

    Filesize

    64KB

  • memory/1736-182-0x000001DF00500000-0x000001DF00510000-memory.dmp

    Filesize

    64KB

  • memory/1736-181-0x000001DF00470000-0x000001DF00480000-memory.dmp

    Filesize

    64KB

  • memory/1736-184-0x000001DF00480000-0x000001DF00490000-memory.dmp

    Filesize

    64KB

  • memory/1736-185-0x000001DF00510000-0x000001DF00520000-memory.dmp

    Filesize

    64KB

  • memory/1736-189-0x000001DF00490000-0x000001DF004A0000-memory.dmp

    Filesize

    64KB

  • memory/1736-190-0x000001DF00520000-0x000001DF00530000-memory.dmp

    Filesize

    64KB

  • memory/1736-193-0x000001DF00530000-0x000001DF00540000-memory.dmp

    Filesize

    64KB

  • memory/1736-192-0x000001DF004A0000-0x000001DF004B0000-memory.dmp

    Filesize

    64KB

  • memory/1736-195-0x000001DF004B0000-0x000001DF004C0000-memory.dmp

    Filesize

    64KB

  • memory/1736-199-0x000001DF00540000-0x000001DF00550000-memory.dmp

    Filesize

    64KB

  • memory/1736-198-0x000001DF004C0000-0x000001DF004D0000-memory.dmp

    Filesize

    64KB

  • memory/1736-201-0x000001DF7EBE0000-0x000001DF7EBE1000-memory.dmp

    Filesize

    4KB

  • memory/1736-203-0x000001DF00550000-0x000001DF00560000-memory.dmp

    Filesize

    64KB

  • memory/1736-206-0x000001DF00560000-0x000001DF00570000-memory.dmp

    Filesize

    64KB

  • memory/1736-205-0x000001DF004D0000-0x000001DF004E0000-memory.dmp

    Filesize

    64KB

  • memory/1736-212-0x000001DF004E0000-0x000001DF004F0000-memory.dmp

    Filesize

    64KB

  • memory/1736-213-0x000001DF00570000-0x000001DF00580000-memory.dmp

    Filesize

    64KB

  • memory/1736-215-0x000001DF004F0000-0x000001DF00500000-memory.dmp

    Filesize

    64KB

  • memory/1736-216-0x000001DF00580000-0x000001DF00590000-memory.dmp

    Filesize

    64KB

  • memory/1736-219-0x000001DF00500000-0x000001DF00510000-memory.dmp

    Filesize

    64KB

  • memory/1736-221-0x000001DF00590000-0x000001DF005A0000-memory.dmp

    Filesize

    64KB

  • memory/1736-220-0x000001DF00510000-0x000001DF00520000-memory.dmp

    Filesize

    64KB