Analysis
- max time kernel
149s - max time network
140s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
- submitted
26/02/2026, 13:08
General
- Target CUMAFYATTEKLFBEKLENENURUNLSTES.jar
- Size 397KB
- Sample260226-qdl19ae12e
- SHA256 b06817876fc838390a82356c1e5e2e1322a11306f5b3b6e1011a131303dac0eb
Malware Config
Signatures
- Command and Scripting Interpreter: PowerShell 1 TTPs 1 IoCs
Using powershell.exe command.
- Suspicious behavior: EnumeratesProcesses 3 IoCs
- Suspicious use of AdjustPrivilegeToken 22 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -jar C:\Users\Admin\AppData\Local\Temp\CUMAFYATTEKLFBEKLENENURUNLSTES.jar1⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell -Command "Get-CimInstance Win32_Processor | Select-Object -ExpandProperty NumberOfCores"2⤵
- Command and Scripting Interpreter: PowerShell
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
__PSScriptPolicyTest_j2akili2.3da.ps1
memory/4432-110-0x00000243D9C70000-0x00000243D9C80000-memory.dmp
memory/4432-119-0x00000243F2410000-0x00000243F2432000-memory.dmp
memory/4432-120-0x00000243F27B0000-0x00000243F27DA000-memory.dmp
memory/4432-121-0x00000243F27B0000-0x00000243F27D4000-memory.dmp
memory/4432-130-0x00000243D9BB0000-0x00000243D9C59000-memory.dmp
memory/4432-129-0x00000243D9B00000-0x00000243D9B0C000-memory.dmp
memory/4432-125-0x00000243D9C70000-0x00000243D9C80000-memory.dmp
memory/4568-89-0x00000214AAD50000-0x00000214AAD60000-memory.dmp
memory/4568-94-0x00000214AACD0000-0x00000214AACE0000-memory.dmp
memory/4568-38-0x00000214AAC20000-0x00000214AAC30000-memory.dmp
memory/4568-40-0x00000214AAC30000-0x00000214AAC40000-memory.dmp
memory/4568-42-0x00000214AAC40000-0x00000214AAC50000-memory.dmp
memory/4568-44-0x00000214AAC50000-0x00000214AAC60000-memory.dmp
memory/4568-47-0x00000214AAC60000-0x00000214AAC70000-memory.dmp
memory/4568-49-0x00000214AAC70000-0x00000214AAC80000-memory.dmp
memory/4568-50-0x00000214AAC80000-0x00000214AAC90000-memory.dmp
memory/4568-98-0x00000214AAD80000-0x00000214AAD90000-memory.dmp
memory/4568-54-0x00000214AACA0000-0x00000214AACB0000-memory.dmp
memory/4568-57-0x00000214AACB0000-0x00000214AACC0000-memory.dmp
memory/4568-56-0x00000214AAC10000-0x00000214AAC20000-memory.dmp
memory/4568-60-0x00000214AACC0000-0x00000214AACD0000-memory.dmp
memory/4568-59-0x00000214AAC20000-0x00000214AAC30000-memory.dmp
memory/4568-63-0x00000214AACD0000-0x00000214AACE0000-memory.dmp
memory/4568-62-0x00000214AAC30000-0x00000214AAC40000-memory.dmp
memory/4568-67-0x00000214AACE0000-0x00000214AACF0000-memory.dmp
memory/4568-65-0x00000214AAC40000-0x00000214AAC50000-memory.dmp
memory/4568-68-0x00000214AAC50000-0x00000214AAC60000-memory.dmp
memory/4568-70-0x00000214AACF0000-0x00000214AAD00000-memory.dmp
memory/4568-71-0x00000214AAC60000-0x00000214AAC70000-memory.dmp
memory/4568-72-0x00000214AAD00000-0x00000214AAD10000-memory.dmp
memory/4568-76-0x00000214AAD10000-0x00000214AAD20000-memory.dmp
memory/4568-75-0x00000214AAC70000-0x00000214AAC80000-memory.dmp
memory/4568-74-0x00000214AA980000-0x00000214AA981000-memory.dmp
memory/4568-79-0x00000214AAD20000-0x00000214AAD30000-memory.dmp
memory/4568-78-0x00000214AAC80000-0x00000214AAC90000-memory.dmp
memory/4568-82-0x00000214AAC90000-0x00000214AACA0000-memory.dmp
memory/4568-83-0x00000214AACA0000-0x00000214AACB0000-memory.dmp
memory/4568-84-0x00000214AAD30000-0x00000214AAD40000-memory.dmp
memory/4568-86-0x00000214AAD40000-0x00000214AAD50000-memory.dmp
memory/4568-34-0x00000214AA9A0000-0x00000214AAC10000-memory.dmp
memory/4568-88-0x00000214AACB0000-0x00000214AACC0000-memory.dmp
memory/4568-92-0x00000214AAD60000-0x00000214AAD70000-memory.dmp
memory/4568-91-0x00000214AACC0000-0x00000214AACD0000-memory.dmp
memory/4568-36-0x00000214AAC10000-0x00000214AAC20000-memory.dmp
memory/4568-95-0x00000214AAD70000-0x00000214AAD80000-memory.dmp
memory/4568-53-0x00000214AAC90000-0x00000214AACA0000-memory.dmp
memory/4568-97-0x00000214AACE0000-0x00000214AACF0000-memory.dmp
memory/4568-104-0x00000214AAD90000-0x00000214AADA0000-memory.dmp
memory/4568-103-0x00000214AACF0000-0x00000214AAD00000-memory.dmp
memory/4568-107-0x00000214AAD00000-0x00000214AAD10000-memory.dmp
memory/4568-108-0x00000214AADA0000-0x00000214AADB0000-memory.dmp
memory/4568-111-0x00000214AAD20000-0x00000214AAD30000-memory.dmp
memory/4568-109-0x00000214AAD10000-0x00000214AAD20000-memory.dmp
memory/4568-123-0x00000214AAD30000-0x00000214AAD40000-memory.dmp
memory/4568-31-0x00000214AA980000-0x00000214AA981000-memory.dmp
memory/4568-124-0x00000214AAD40000-0x00000214AAD50000-memory.dmp
memory/4568-131-0x00000214C69D0000-0x00000214C69DC000-memory.dmp
memory/4568-21-0x00000214AA980000-0x00000214AA981000-memory.dmp
memory/4568-128-0x00000214AA980000-0x00000214AA981000-memory.dmp
memory/4568-134-0x00000214AAC20000-0x00000214AAC30000-memory.dmp
memory/4568-141-0x00000214AACA0000-0x00000214AACB0000-memory.dmp
memory/4568-151-0x00000214AADA0000-0x00000214AADB0000-memory.dmp
memory/4568-150-0x00000214AAD90000-0x00000214AADA0000-memory.dmp
memory/4568-149-0x00000214AAD80000-0x00000214AAD90000-memory.dmp
memory/4568-148-0x00000214AAD70000-0x00000214AAD80000-memory.dmp
memory/4568-145-0x00000214AAD00000-0x00000214AAD10000-memory.dmp
memory/4568-144-0x00000214AACE0000-0x00000214AACF0000-memory.dmp
memory/4568-143-0x00000214AACD0000-0x00000214AACE0000-memory.dmp
memory/4568-142-0x00000214AACC0000-0x00000214AACD0000-memory.dmp
memory/4568-140-0x00000214AAC90000-0x00000214AACA0000-memory.dmp
memory/4568-139-0x00000214AAC80000-0x00000214AAC90000-memory.dmp
memory/4568-137-0x00000214AAC50000-0x00000214AAC60000-memory.dmp
memory/4568-136-0x00000214AAC40000-0x00000214AAC50000-memory.dmp
memory/4568-135-0x00000214AAC30000-0x00000214AAC40000-memory.dmp
memory/4568-147-0x00000214AAD60000-0x00000214AAD70000-memory.dmp
memory/4568-138-0x00000214AAC70000-0x00000214AAC80000-memory.dmp
memory/4568-146-0x00000214AAD50000-0x00000214AAD60000-memory.dmp
memory/4568-133-0x00000214AAC10000-0x00000214AAC20000-memory.dmp
memory/4568-132-0x00000214AA9A0000-0x00000214AAC10000-memory.dmp
memory/4568-2-0x00000214AA9A0000-0x00000214AAC10000-memory.dmp