Analysis

  • user interaction
    yes
  • max time kernel
    24s
  • max time network
    27s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260130-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    18/04/2026, 02:56

General

  • Target
    6z125151phn.jar
  • Size 2.7MB
  • Sample260418-de16caat2r
  • SHA256 3794631c365b2a48622759fffc7e17a21966805d7a0969e4b96bcb5c06dfa634
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 18 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\6z125151phn.jar
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:4592

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/4592-2-0x00000128BD590000-0x00000128BD800000-memory.dmp

        memory/4592-14-0x00000128BB910000-0x00000128BB911000-memory.dmp

        memory/4592-21-0x00000128BB910000-0x00000128BB911000-memory.dmp

        memory/4592-23-0x00000128BD800000-0x00000128BD810000-memory.dmp

        memory/4592-25-0x00000128BD810000-0x00000128BD820000-memory.dmp

        memory/4592-28-0x00000128BD820000-0x00000128BD830000-memory.dmp

        memory/4592-31-0x00000128BD830000-0x00000128BD840000-memory.dmp

        memory/4592-32-0x00000128BD840000-0x00000128BD850000-memory.dmp

        memory/4592-34-0x00000128BD850000-0x00000128BD860000-memory.dmp

        memory/4592-36-0x00000128BD860000-0x00000128BD870000-memory.dmp

        memory/4592-39-0x00000128BD870000-0x00000128BD880000-memory.dmp

        memory/4592-44-0x00000128BD890000-0x00000128BD8A0000-memory.dmp

        memory/4592-43-0x00000128BD880000-0x00000128BD890000-memory.dmp

        memory/4592-42-0x00000128BD590000-0x00000128BD800000-memory.dmp

        memory/4592-50-0x00000128BD8A0000-0x00000128BD8B0000-memory.dmp

        memory/4592-49-0x00000128BD800000-0x00000128BD810000-memory.dmp

        memory/4592-52-0x00000128BD8B0000-0x00000128BD8C0000-memory.dmp

        memory/4592-51-0x00000128BD810000-0x00000128BD820000-memory.dmp

        memory/4592-55-0x00000128BD820000-0x00000128BD830000-memory.dmp

        memory/4592-56-0x00000128BD8C0000-0x00000128BD8D0000-memory.dmp

        memory/4592-60-0x00000128BD8D0000-0x00000128BD8E0000-memory.dmp

        memory/4592-59-0x00000128BD840000-0x00000128BD850000-memory.dmp

        memory/4592-58-0x00000128BD830000-0x00000128BD840000-memory.dmp

        memory/4592-61-0x00000128BD8E0000-0x00000128BD8F0000-memory.dmp

        memory/4592-62-0x00000128BB910000-0x00000128BB911000-memory.dmp

        memory/4592-65-0x00000128BD850000-0x00000128BD860000-memory.dmp

        memory/4592-66-0x00000128BD8F0000-0x00000128BD900000-memory.dmp

        memory/4592-68-0x00000128BD860000-0x00000128BD870000-memory.dmp

        memory/4592-69-0x00000128BD900000-0x00000128BD910000-memory.dmp

        memory/4592-74-0x00000128BD910000-0x00000128BD920000-memory.dmp

        memory/4592-73-0x00000128BD870000-0x00000128BD880000-memory.dmp

        memory/4592-75-0x00000128BB910000-0x00000128BB911000-memory.dmp

        memory/4592-78-0x00000128BD880000-0x00000128BD890000-memory.dmp

        memory/4592-79-0x00000128BD920000-0x00000128BD930000-memory.dmp

        memory/4592-86-0x00000128BD940000-0x00000128BD950000-memory.dmp

        memory/4592-87-0x00000128BD8A0000-0x00000128BD8B0000-memory.dmp

        memory/4592-85-0x00000128BD930000-0x00000128BD940000-memory.dmp

        memory/4592-91-0x00000128BD8B0000-0x00000128BD8C0000-memory.dmp

        memory/4592-92-0x00000128BD950000-0x00000128BD960000-memory.dmp

        memory/4592-84-0x00000128BD890000-0x00000128BD8A0000-memory.dmp

        memory/4592-98-0x00000128BD8D0000-0x00000128BD8E0000-memory.dmp

        memory/4592-97-0x00000128BD970000-0x00000128BD980000-memory.dmp

        memory/4592-96-0x00000128BD960000-0x00000128BD970000-memory.dmp

        memory/4592-95-0x00000128BD8C0000-0x00000128BD8D0000-memory.dmp

        memory/4592-108-0x00000128BD980000-0x00000128BD990000-memory.dmp

        memory/4592-107-0x00000128BD8E0000-0x00000128BD8F0000-memory.dmp

        memory/4592-101-0x00000128DD150000-0x00000128DD151000-memory.dmp

        memory/4592-115-0x00000128BD900000-0x00000128BD910000-memory.dmp

        memory/4592-114-0x00000128BD9A0000-0x00000128BD9B0000-memory.dmp

        memory/4592-113-0x00000128BD990000-0x00000128BD9A0000-memory.dmp

        memory/4592-112-0x00000128BD8F0000-0x00000128BD900000-memory.dmp

        memory/4592-116-0x00000128BB910000-0x00000128BB911000-memory.dmp

        memory/4592-117-0x00000128BD910000-0x00000128BD920000-memory.dmp

        memory/4592-120-0x00000128BD9B0000-0x00000128BD9C0000-memory.dmp

        memory/4592-119-0x00000128BD920000-0x00000128BD930000-memory.dmp

        memory/4592-123-0x00000128BD940000-0x00000128BD950000-memory.dmp

        memory/4592-124-0x00000128BD9C0000-0x00000128BD9D0000-memory.dmp

        memory/4592-126-0x00000128BD9D0000-0x00000128BD9E0000-memory.dmp

        memory/4592-129-0x00000128BD950000-0x00000128BD960000-memory.dmp

        memory/4592-130-0x00000128BD9E0000-0x00000128BD9F0000-memory.dmp

        memory/4592-132-0x00000128BD960000-0x00000128BD970000-memory.dmp

        memory/4592-134-0x00000128BD9F0000-0x00000128BDA00000-memory.dmp

        memory/4592-133-0x00000128BD970000-0x00000128BD980000-memory.dmp

        memory/4592-137-0x00000128BDA00000-0x00000128BDA10000-memory.dmp

        memory/4592-140-0x00000128BDA10000-0x00000128BDA20000-memory.dmp

        memory/4592-139-0x00000128BD980000-0x00000128BD990000-memory.dmp

        memory/4592-143-0x00000128BD990000-0x00000128BD9A0000-memory.dmp

        memory/4592-145-0x00000128BDA20000-0x00000128BDA30000-memory.dmp

        memory/4592-146-0x00000128BDA30000-0x00000128BDA40000-memory.dmp

        memory/4592-144-0x00000128BD9A0000-0x00000128BD9B0000-memory.dmp

        memory/4592-149-0x00000128BDA40000-0x00000128BDA50000-memory.dmp

        memory/4592-152-0x00000128BDA50000-0x00000128BDA60000-memory.dmp

        memory/4592-151-0x00000128BD9B0000-0x00000128BD9C0000-memory.dmp

        memory/4592-153-0x00000128BB910000-0x00000128BB911000-memory.dmp

        memory/4592-154-0x00000128BD9C0000-0x00000128BD9D0000-memory.dmp

        memory/4592-157-0x00000128BDA60000-0x00000128BDA70000-memory.dmp

        memory/4592-156-0x00000128BD9D0000-0x00000128BD9E0000-memory.dmp

        memory/4592-160-0x00000128BDA70000-0x00000128BDA80000-memory.dmp

        memory/4592-159-0x00000128BD9E0000-0x00000128BD9F0000-memory.dmp

        memory/4592-164-0x00000128BDA80000-0x00000128BDA90000-memory.dmp

        memory/4592-163-0x00000128BD9F0000-0x00000128BDA00000-memory.dmp

        memory/4592-166-0x00000128BDA00000-0x00000128BDA10000-memory.dmp

        memory/4592-167-0x00000128BDA90000-0x00000128BDAA0000-memory.dmp

        memory/4592-170-0x00000128BDAA0000-0x00000128BDAB0000-memory.dmp

        memory/4592-169-0x00000128BDA10000-0x00000128BDA20000-memory.dmp

        memory/4592-172-0x00000128BDA20000-0x00000128BDA30000-memory.dmp

        memory/4592-173-0x00000128BDA30000-0x00000128BDA40000-memory.dmp

        memory/4592-178-0x00000128BDAB0000-0x00000128BDAC0000-memory.dmp

        memory/4592-177-0x00000128BDA40000-0x00000128BDA50000-memory.dmp

        memory/4592-179-0x00000128BDA50000-0x00000128BDA60000-memory.dmp

        memory/4592-181-0x00000128BB910000-0x00000128BB911000-memory.dmp

        memory/4592-187-0x00000128BB910000-0x00000128BB911000-memory.dmp

        memory/4592-188-0x00000128BDAC0000-0x00000128BDAD0000-memory.dmp

        memory/4592-190-0x00000128BDA60000-0x00000128BDA70000-memory.dmp

        memory/4592-191-0x00000128BDAD0000-0x00000128BDAE0000-memory.dmp

        memory/4592-195-0x00000128BDA70000-0x00000128BDA80000-memory.dmp

        memory/4592-197-0x00000128BDAE0000-0x00000128BDAF0000-memory.dmp

        memory/4592-196-0x00000128BDA80000-0x00000128BDA90000-memory.dmp

        memory/4592-200-0x00000128BDAF0000-0x00000128BDB00000-memory.dmp

        memory/4592-199-0x00000128BDA90000-0x00000128BDAA0000-memory.dmp

        memory/4592-204-0x00000128BDB00000-0x00000128BDB10000-memory.dmp

        memory/4592-203-0x00000128BDAA0000-0x00000128BDAB0000-memory.dmp

        memory/4592-207-0x00000128BDB10000-0x00000128BDB20000-memory.dmp

        memory/4592-208-0x00000128BDB20000-0x00000128BDB30000-memory.dmp

        memory/4592-210-0x00000128BDAB0000-0x00000128BDAC0000-memory.dmp

        memory/4592-234-0x00000128BB910000-0x00000128BB911000-memory.dmp