Analysis
- user interaction
yes - max time kernel
58s - max time network
62s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260513-en - resource tags
- submitted
23/05/2026, 12:08
General
- Target TechnicLauncher.exe
- Size 5.2MB
- Sample260523-pbdfnab121
- SHA256 9e3d23722f74aa253f651cd59c10f6db19779db4f5b8b6cbceee77f0eccdc8e7
Malware Config
Signatures
- Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
- System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious use of SetWindowsHookEx 4 IoCs
- Suspicious use of WriteProcessMemory 10 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\TechnicLauncher.exe"C:\Users\Admin\AppData\Local\Temp\TechnicLauncher.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Java\jre-1.8\bin\javaw.exe"C:\Program Files\Java\jre-1.8\bin\javaw.exe" -Djava.net.preferIPv4Stack=true -Dawt.useSystemAAFontSettings=lcd -Dswing.aatext=true -classpath "C:\Users\Admin\AppData\Local\Temp\TechnicLauncher.exe;anything" net.technicpack.launcher.LauncherMain2⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\TechnicLauncher.exeC:\Users\Admin\AppData\Local\Temp\TechnicLauncher.exe3⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Java\jre-1.8\bin\javaw.exe"C:\Program Files\Java\jre-1.8\bin\javaw.exe" -Djava.net.preferIPv4Stack=true -Dawt.useSystemAAFontSettings=lcd -Dswing.aatext=true -classpath "C:\Users\Admin\AppData\Local\Temp\TechnicLauncher.exe;anything" net.technicpack.launcher.LauncherMain4⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Windows\SYSTEM32\reg.exereg query HKEY_LOCAL_MACHINE\Software\JavaSoft\ /f Home /t REG_SZ /s /reg:325⤵
-
-
C:\Windows\SYSTEM32\reg.exereg query HKEY_LOCAL_MACHINE\Software\JavaSoft\ /f Home /t REG_SZ /s /reg:645⤵
-
-
C:\Program Files\Java\jdk-1.8\bin\java.exe"C:\Program Files\Java\jdk-1.8\bin\java.exe" -version5⤵
-
-
C:\Program Files\Java\jdk-1.8\bin\java.exe"C:\Program Files\Java\jdk-1.8\bin\java.exe" -version5⤵
-
-
C:\Program Files\Java\jre-1.8\bin\java.exe"C:\Program Files\Java\jre-1.8\bin\java.exe" -version5⤵
-
-
C:\Program Files\Java\jre-1.8\bin\java.exe"C:\Program Files\Java\jre-1.8\bin\java.exe" -version5⤵
-
-
C:\Program Files\Java\jre-1.8\bin\java.exe"C:\Program Files\Java\jre-1.8\bin\java.exe" -version5⤵
-
-
-
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
imageio5215932165495585406.tmp
imageio7047113743710355830.tmp
installedPacks
settings.json
83aa4cc77f591dfc2374580bbd95f6ba_bd19434d-e173-4051-ab93-e1b76925f4b9
memory/1384-354-0x000001EBD2C60000-0x000001EBD2C61000-memory.dmp
memory/1936-368-0x000001A589970000-0x000001A589971000-memory.dmp
memory/2724-0-0x0000000000400000-0x000000000041C000-memory.dmp
memory/2988-410-0x000002761E2A0000-0x000002761E2A1000-memory.dmp
memory/3276-382-0x0000022A2DB80000-0x0000022A2DB81000-memory.dmp
memory/4668-156-0x0000026CC7940000-0x0000026CC7950000-memory.dmp
memory/4668-77-0x0000026CC77E0000-0x0000026CC77F0000-memory.dmp
memory/4668-36-0x0000026CC77A0000-0x0000026CC77B0000-memory.dmp
memory/4668-40-0x0000026CC77B0000-0x0000026CC77C0000-memory.dmp
memory/4668-41-0x0000026CC77C0000-0x0000026CC77D0000-memory.dmp
memory/4668-43-0x0000026CC77D0000-0x0000026CC77E0000-memory.dmp
memory/4668-48-0x0000026CC77F0000-0x0000026CC7800000-memory.dmp
memory/4668-47-0x0000026CC77E0000-0x0000026CC77F0000-memory.dmp
memory/4668-46-0x0000026CC74F0000-0x0000026CC7760000-memory.dmp
memory/4668-49-0x0000026CC5C50000-0x0000026CC5C51000-memory.dmp
memory/4668-52-0x0000026CC7800000-0x0000026CC7810000-memory.dmp
memory/4668-51-0x0000026CC7760000-0x0000026CC7770000-memory.dmp
memory/4668-55-0x0000026CC7810000-0x0000026CC7820000-memory.dmp
memory/4668-54-0x0000026CC7770000-0x0000026CC7780000-memory.dmp
memory/4668-60-0x0000026CC7820000-0x0000026CC7830000-memory.dmp
memory/4668-59-0x0000026CC7780000-0x0000026CC7790000-memory.dmp
memory/4668-63-0x0000026CC7790000-0x0000026CC77A0000-memory.dmp
memory/4668-64-0x0000026CC7830000-0x0000026CC7840000-memory.dmp
memory/4668-66-0x0000026CC77A0000-0x0000026CC77B0000-memory.dmp
memory/4668-68-0x0000026CC77B0000-0x0000026CC77C0000-memory.dmp
memory/4668-69-0x0000026CC7840000-0x0000026CC7850000-memory.dmp
memory/4668-72-0x0000026CC77C0000-0x0000026CC77D0000-memory.dmp
memory/4668-76-0x0000026CC7850000-0x0000026CC7860000-memory.dmp
memory/4668-75-0x0000026CC77D0000-0x0000026CC77E0000-memory.dmp
memory/4668-166-0x0000026CC7A10000-0x0000026CC7A20000-memory.dmp
memory/4668-78-0x0000026CC5C50000-0x0000026CC5C51000-memory.dmp
memory/4668-80-0x0000026CC77F0000-0x0000026CC7800000-memory.dmp
memory/4668-81-0x0000026CC7860000-0x0000026CC7870000-memory.dmp
memory/4668-162-0x0000026CC7A00000-0x0000026CC7A10000-memory.dmp
memory/4668-83-0x0000026CC7800000-0x0000026CC7810000-memory.dmp
memory/4668-88-0x0000026CC7880000-0x0000026CC7890000-memory.dmp
memory/4668-87-0x0000026CC7810000-0x0000026CC7820000-memory.dmp
memory/4668-92-0x0000026CC7890000-0x0000026CC78A0000-memory.dmp
memory/4668-91-0x0000026CC7820000-0x0000026CC7830000-memory.dmp
memory/4668-96-0x0000026CC7830000-0x0000026CC7840000-memory.dmp
memory/4668-100-0x0000026CC5C50000-0x0000026CC5C51000-memory.dmp
memory/4668-98-0x0000026CC78B0000-0x0000026CC78C0000-memory.dmp
memory/4668-97-0x0000026CC78A0000-0x0000026CC78B0000-memory.dmp
memory/4668-105-0x0000026CC78D0000-0x0000026CC78E0000-memory.dmp
memory/4668-104-0x0000026CC78C0000-0x0000026CC78D0000-memory.dmp
memory/4668-103-0x0000026CC7840000-0x0000026CC7850000-memory.dmp
memory/4668-108-0x0000026CC78E0000-0x0000026CC78F0000-memory.dmp
memory/4668-107-0x0000026CC7850000-0x0000026CC7860000-memory.dmp
memory/4668-110-0x0000026CC78F0000-0x0000026CC7900000-memory.dmp
memory/4668-115-0x0000026CC7900000-0x0000026CC7910000-memory.dmp
memory/4668-114-0x0000026CC7860000-0x0000026CC7870000-memory.dmp
memory/4668-117-0x0000026CC7870000-0x0000026CC7880000-memory.dmp
memory/4668-118-0x0000026CC7910000-0x0000026CC7920000-memory.dmp
memory/4668-120-0x0000026CC7880000-0x0000026CC7890000-memory.dmp
memory/4668-121-0x0000026CC7920000-0x0000026CC7930000-memory.dmp
memory/4668-124-0x0000026CC7930000-0x0000026CC7940000-memory.dmp
memory/4668-123-0x0000026CC7890000-0x0000026CC78A0000-memory.dmp
memory/4668-127-0x0000026CC7940000-0x0000026CC7950000-memory.dmp
memory/4668-126-0x0000026CC78A0000-0x0000026CC78B0000-memory.dmp
memory/4668-131-0x0000026CC7950000-0x0000026CC7960000-memory.dmp
memory/4668-130-0x0000026CC78B0000-0x0000026CC78C0000-memory.dmp
memory/4668-133-0x0000026CC78D0000-0x0000026CC78E0000-memory.dmp
memory/4668-135-0x0000026CC7970000-0x0000026CC7980000-memory.dmp
memory/4668-134-0x0000026CC7960000-0x0000026CC7970000-memory.dmp
memory/4668-138-0x0000026CC7980000-0x0000026CC7990000-memory.dmp
memory/4668-137-0x0000026CC78E0000-0x0000026CC78F0000-memory.dmp
memory/4668-140-0x0000026CC78F0000-0x0000026CC7900000-memory.dmp
memory/4668-141-0x0000026CC7990000-0x0000026CC79A0000-memory.dmp
memory/4668-145-0x0000026CC79A0000-0x0000026CC79B0000-memory.dmp
memory/4668-144-0x0000026CC7900000-0x0000026CC7910000-memory.dmp
memory/4668-147-0x0000026CC7910000-0x0000026CC7920000-memory.dmp
memory/4668-150-0x0000026CC7920000-0x0000026CC7930000-memory.dmp
memory/4668-149-0x0000026CC79C0000-0x0000026CC79D0000-memory.dmp
memory/4668-165-0x0000026CC7970000-0x0000026CC7980000-memory.dmp
memory/4668-153-0x0000026CC79D0000-0x0000026CC79E0000-memory.dmp
memory/4668-152-0x0000026CC7930000-0x0000026CC7940000-memory.dmp
memory/4668-32-0x0000026CC7780000-0x0000026CC7790000-memory.dmp
memory/4668-157-0x0000026CC79E0000-0x0000026CC79F0000-memory.dmp
memory/4668-158-0x0000026CC7950000-0x0000026CC7960000-memory.dmp
memory/4668-159-0x0000026CC79F0000-0x0000026CC7A00000-memory.dmp
memory/4668-161-0x0000026CC7960000-0x0000026CC7970000-memory.dmp
memory/4668-84-0x0000026CC7870000-0x0000026CC7880000-memory.dmp
memory/4668-34-0x0000026CC7790000-0x0000026CC77A0000-memory.dmp
memory/4668-148-0x0000026CC79B0000-0x0000026CC79C0000-memory.dmp
memory/4668-167-0x0000026CC7980000-0x0000026CC7990000-memory.dmp
memory/4668-168-0x0000026CC7A20000-0x0000026CC7A30000-memory.dmp
memory/4668-171-0x0000026CC7A30000-0x0000026CC7A40000-memory.dmp
memory/4668-170-0x0000026CC7990000-0x0000026CC79A0000-memory.dmp
memory/4668-175-0x0000026CC7A40000-0x0000026CC7A50000-memory.dmp
memory/4668-173-0x0000026CC79A0000-0x0000026CC79B0000-memory.dmp
memory/4668-178-0x0000026CC7A50000-0x0000026CC7A60000-memory.dmp
memory/4668-177-0x0000026CC79C0000-0x0000026CC79D0000-memory.dmp
memory/4668-176-0x0000026CC79B0000-0x0000026CC79C0000-memory.dmp
memory/4668-180-0x0000026CC7A60000-0x0000026CC7A70000-memory.dmp
memory/4668-183-0x0000026CC7A70000-0x0000026CC7A80000-memory.dmp
memory/4668-182-0x0000026CC79D0000-0x0000026CC79E0000-memory.dmp
memory/4668-184-0x0000026CC5C50000-0x0000026CC5C51000-memory.dmp
memory/4668-190-0x0000026CC5C50000-0x0000026CC5C51000-memory.dmp
memory/4668-203-0x0000026CC7A80000-0x0000026CC7A90000-memory.dmp
memory/4668-206-0x0000026CC7AA0000-0x0000026CC7AB0000-memory.dmp
memory/4668-205-0x0000026CC79F0000-0x0000026CC7A00000-memory.dmp
memory/4668-204-0x0000026CC7A90000-0x0000026CC7AA0000-memory.dmp
memory/4668-200-0x0000026CC79E0000-0x0000026CC79F0000-memory.dmp
memory/4668-221-0x0000026CC5C50000-0x0000026CC5C51000-memory.dmp
memory/4668-238-0x0000026CC5C50000-0x0000026CC5C51000-memory.dmp
memory/4668-235-0x0000026CC5C50000-0x0000026CC5C51000-memory.dmp
memory/4668-248-0x0000026CC5C50000-0x0000026CC5C51000-memory.dmp
memory/4668-3-0x0000026CC74F0000-0x0000026CC7760000-memory.dmp
memory/4668-12-0x0000026CC5C50000-0x0000026CC5C51000-memory.dmp
memory/4668-16-0x0000026CC5C50000-0x0000026CC5C51000-memory.dmp
memory/4668-26-0x0000026CC7760000-0x0000026CC7770000-memory.dmp
memory/4668-29-0x0000026CC5C50000-0x0000026CC5C51000-memory.dmp
memory/4668-28-0x0000026CC7770000-0x0000026CC7780000-memory.dmp
memory/4892-243-0x0000000000400000-0x000000000041C000-memory.dmp
memory/5056-396-0x00000193E9A50000-0x00000193E9A51000-memory.dmp
memory/5128-553-0x00000247E26E0000-0x00000247E26E1000-memory.dmp
memory/5128-618-0x00000247E26E0000-0x00000247E26E1000-memory.dmp
memory/5128-461-0x00000247E26E0000-0x00000247E26E1000-memory.dmp
memory/5128-477-0x00000247E26E0000-0x00000247E26E1000-memory.dmp
memory/5128-519-0x00000247E26E0000-0x00000247E26E1000-memory.dmp
memory/5128-521-0x00000247E26E0000-0x00000247E26E1000-memory.dmp
memory/5128-622-0x00000247E26E0000-0x00000247E26E1000-memory.dmp
memory/5128-619-0x00000247E26E0000-0x00000247E26E1000-memory.dmp
memory/5128-564-0x00000247E26E0000-0x00000247E26E1000-memory.dmp
memory/5128-570-0x00000247E26E0000-0x00000247E26E1000-memory.dmp
memory/5128-572-0x00000247E26E0000-0x00000247E26E1000-memory.dmp
memory/5128-585-0x00000247E26E0000-0x00000247E26E1000-memory.dmp
memory/5128-588-0x00000247E26E0000-0x00000247E26E1000-memory.dmp
memory/5128-628-0x00000247E26E0000-0x00000247E26E1000-memory.dmp
memory/5128-603-0x00000247E26E0000-0x00000247E26E1000-memory.dmp
memory/5128-627-0x00000247E26E0000-0x00000247E26E1000-memory.dmp
memory/5128-615-0x00000247E26E0000-0x00000247E26E1000-memory.dmp
memory/5128-614-0x00000247E26E0000-0x00000247E26E1000-memory.dmp
memory/5128-617-0x00000247E26E0000-0x00000247E26E1000-memory.dmp
memory/5128-339-0x00000247E26E0000-0x00000247E26E1000-memory.dmp
memory/5128-613-0x00000247E26E0000-0x00000247E26E1000-memory.dmp
memory/5128-532-0x00000247E26E0000-0x00000247E26E1000-memory.dmp
memory/5128-425-0x00000247E26E0000-0x00000247E26E1000-memory.dmp
memory/5128-626-0x00000247E26E0000-0x00000247E26E1000-memory.dmp
memory/5128-596-0x00000247E26E0000-0x00000247E26E1000-memory.dmp
memory/5128-634-0x00000247E26E0000-0x00000247E26E1000-memory.dmp
memory/5128-636-0x00000247E26E0000-0x00000247E26E1000-memory.dmp
memory/5128-647-0x00000247E26E0000-0x00000247E26E1000-memory.dmp
memory/5128-668-0x00000247E26E0000-0x00000247E26E1000-memory.dmp
memory/5128-671-0x00000247E26E0000-0x00000247E26E1000-memory.dmp
memory/5128-674-0x00000247E26E0000-0x00000247E26E1000-memory.dmp
memory/5128-677-0x00000247E26E0000-0x00000247E26E1000-memory.dmp
memory/5128-679-0x00000247E26E0000-0x00000247E26E1000-memory.dmp
memory/5128-694-0x00000247E26E0000-0x00000247E26E1000-memory.dmp
memory/5128-696-0x00000247E26E0000-0x00000247E26E1000-memory.dmp
memory/5128-702-0x00000247E26E0000-0x00000247E26E1000-memory.dmp
memory/5128-706-0x00000247E26E0000-0x00000247E26E1000-memory.dmp
memory/5128-707-0x00000247E26E0000-0x00000247E26E1000-memory.dmp
memory/5128-714-0x00000247E26E0000-0x00000247E26E1000-memory.dmp
memory/5128-717-0x00000247E26E0000-0x00000247E26E1000-memory.dmp
memory/5128-718-0x00000247E26E0000-0x00000247E26E1000-memory.dmp
memory/5128-733-0x00000247E26E0000-0x00000247E26E1000-memory.dmp
memory/5128-735-0x00000247E26E0000-0x00000247E26E1000-memory.dmp
memory/5128-313-0x00000247E26E0000-0x00000247E26E1000-memory.dmp
memory/5128-318-0x00000247E26E0000-0x00000247E26E1000-memory.dmp