Overview
overview
10Static
static
3KwishClien...nt.jar
windows11-21h2-x64
7KwishClient/Start.exe
windows11-21h2-x64
KwishClien...AL.dll
windows11-21h2-x64
1KwishClien...32.dll
windows11-21h2-x64
1KwishClien...64.dll
windows11-21h2-x64
1KwishClien...86.dll
windows11-21h2-x64
1KwishClien...fw.dll
windows11-21h2-x64
1KwishClien...32.dll
windows11-21h2-x64
1KwishClien...oc.dll
windows11-21h2-x64
1KwishClien...32.dll
windows11-21h2-x64
1KwishClien...gl.dll
windows11-21h2-x64
1KwishClien...32.dll
windows11-21h2-x64
1KwishClien...gl.dll
windows11-21h2-x64
1KwishClien...32.dll
windows11-21h2-x64
3KwishClien...tb.dll
windows11-21h2-x64
1KwishClien...32.dll
windows11-21h2-x64
3KwishClien...fd.dll
windows11-21h2-x64
1KwishClien...32.dll
windows11-21h2-x64
3Analysis
-
max time kernel
1484s -
max time network
1499s -
platform
windows11-21h2_x64 -
resource
win11-20240611-en -
resource tags
arch:x64arch:x86image:win11-20240611-enlocale:en-usos:windows11-21h2-x64system -
submitted
25-06-2024 10:39
Static task
static1
Behavioral task
behavioral1
Sample
KwishClient/KwishClient.jar
Resource
win11-20240508-en
Behavioral task
behavioral2
Sample
KwishClient/Start.exe
Resource
win11-20240611-en
Behavioral task
behavioral3
Sample
KwishClient/resources/OpenAL.dll
Resource
win11-20240508-en
Behavioral task
behavioral4
Sample
KwishClient/resources/OpenAL32.dll
Resource
win11-20240611-en
Behavioral task
behavioral5
Sample
KwishClient/resources/SAPIWrapper_x64.dll
Resource
win11-20240508-en
Behavioral task
behavioral6
Sample
KwishClient/resources/SAPIWrapper_x86.dll
Resource
win11-20240611-en
Behavioral task
behavioral7
Sample
KwishClient/resources/glfw.dll
Resource
win11-20240419-en
Behavioral task
behavioral8
Sample
KwishClient/resources/glfw32.dll
Resource
win11-20240508-en
Behavioral task
behavioral9
Sample
KwishClient/resources/jemalloc.dll
Resource
win11-20240508-en
Behavioral task
behavioral10
Sample
KwishClient/resources/jemalloc32.dll
Resource
win11-20240611-en
Behavioral task
behavioral11
Sample
KwishClient/resources/lwjgl.dll
Resource
win11-20240611-en
Behavioral task
behavioral12
Sample
KwishClient/resources/lwjgl32.dll
Resource
win11-20240611-en
Behavioral task
behavioral13
Sample
KwishClient/resources/lwjgl_opengl.dll
Resource
win11-20240508-en
Behavioral task
behavioral14
Sample
KwishClient/resources/lwjgl_opengl32.dll
Resource
win11-20240611-en
Behavioral task
behavioral15
Sample
KwishClient/resources/lwjgl_stb.dll
Resource
win11-20240508-en
Behavioral task
behavioral16
Sample
KwishClient/resources/lwjgl_stb32.dll
Resource
win11-20240508-en
Behavioral task
behavioral17
Sample
KwishClient/resources/lwjgl_tinyfd.dll
Resource
win11-20240508-en
Behavioral task
behavioral18
Sample
KwishClient/resources/lwjgl_tinyfd32.dll
Resource
win11-20240611-en
General
-
Target
KwishClient/resources/lwjgl32.dll
-
Size
419KB
-
MD5
b8ea778d75b1150ec0eec59d764e57cd
-
SHA1
a7aa4fbaa375fd39c4cb8eabeef45b44d5848bcb
-
SHA256
8c9490c5267a615bf0d90a84066628791a453aa30abbe86a8424281b8cdbfc79
-
SHA512
38e10e2cca2079dace6c4f1089d453844cf2b9eb65b0cd01800b478bfcc6117098366ef8547af71fc13d619574ac879ff259698c2d45023ca4a9214616f33495
-
SSDEEP
6144:7s1xf0LNGSd4e1uakLRm8KMbh23nuR+BF2QTX/MhV7:7af0LjDlk88K4yho7
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
rundll32.exedescription pid process target process PID 1048 wrote to memory of 2024 1048 rundll32.exe rundll32.exe PID 1048 wrote to memory of 2024 1048 rundll32.exe rundll32.exe PID 1048 wrote to memory of 2024 1048 rundll32.exe rundll32.exe
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\KwishClient\resources\lwjgl32.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\KwishClient\resources\lwjgl32.dll,#12⤵