Analysis

  • max time kernel
    149s
  • max time network
    95s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260130-en
  • resource tags

    arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    18/04/2026, 02:56

General

  • Target
    6z125151phn.jar
  • Size 2.7MB
  • Sample260418-de16caat2r
  • SHA256 3794631c365b2a48622759fffc7e17a21966805d7a0969e4b96bcb5c06dfa634
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\6z125151phn.jar
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:3684

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/3684-2-0x000001ADEE730000-0x000001ADEE9A0000-memory.dmp

        memory/3684-19-0x000001ADECA20000-0x000001ADECA21000-memory.dmp

        memory/3684-22-0x000001ADEE9A0000-0x000001ADEE9B0000-memory.dmp

        memory/3684-24-0x000001ADEE9B0000-0x000001ADEE9C0000-memory.dmp

        memory/3684-26-0x000001ADEE9C0000-0x000001ADEE9D0000-memory.dmp

        memory/3684-29-0x000001ADEE9D0000-0x000001ADEE9E0000-memory.dmp

        memory/3684-31-0x000001ADEE9E0000-0x000001ADEE9F0000-memory.dmp

        memory/3684-34-0x000001ADEE9F0000-0x000001ADEEA00000-memory.dmp

        memory/3684-35-0x000001ADEEA00000-0x000001ADEEA10000-memory.dmp

        memory/3684-38-0x000001ADEEA10000-0x000001ADEEA20000-memory.dmp

        memory/3684-44-0x000001ADEEA30000-0x000001ADEEA40000-memory.dmp

        memory/3684-51-0x000001ADEEA50000-0x000001ADEEA60000-memory.dmp

        memory/3684-52-0x000001ADEE9B0000-0x000001ADEE9C0000-memory.dmp

        memory/3684-56-0x000001ADEEA60000-0x000001ADEEA70000-memory.dmp

        memory/3684-59-0x000001ADEE9D0000-0x000001ADEE9E0000-memory.dmp

        memory/3684-55-0x000001ADEE9C0000-0x000001ADEE9D0000-memory.dmp

        memory/3684-58-0x000001ADEEA80000-0x000001ADEEA90000-memory.dmp

        memory/3684-57-0x000001ADEEA70000-0x000001ADEEA80000-memory.dmp

        memory/3684-50-0x000001ADEEA40000-0x000001ADEEA50000-memory.dmp

        memory/3684-49-0x000001ADEE9A0000-0x000001ADEE9B0000-memory.dmp

        memory/3684-43-0x000001ADEEA20000-0x000001ADEEA30000-memory.dmp

        memory/3684-42-0x000001ADEE730000-0x000001ADEE9A0000-memory.dmp

        memory/3684-64-0x000001ADEEA90000-0x000001ADEEAA0000-memory.dmp

        memory/3684-63-0x000001ADEE9E0000-0x000001ADEE9F0000-memory.dmp

        memory/3684-68-0x000001ADEEAA0000-0x000001ADEEAB0000-memory.dmp

        memory/3684-67-0x000001ADEE9F0000-0x000001ADEEA00000-memory.dmp

        memory/3684-73-0x000001ADEEAB0000-0x000001ADEEAC0000-memory.dmp

        memory/3684-72-0x000001ADECA20000-0x000001ADECA21000-memory.dmp

        memory/3684-71-0x000001ADEEA00000-0x000001ADEEA10000-memory.dmp

        memory/3684-75-0x000001ADEEA10000-0x000001ADEEA20000-memory.dmp

        memory/3684-76-0x000001ADEEAC0000-0x000001ADEEAD0000-memory.dmp

        memory/3684-87-0x000001ADEEA30000-0x000001ADEEA40000-memory.dmp

        memory/3684-86-0x000001ADEEAE0000-0x000001ADEEAF0000-memory.dmp

        memory/3684-85-0x000001ADEEAD0000-0x000001ADEEAE0000-memory.dmp

        memory/3684-84-0x000001ADEEA20000-0x000001ADEEA30000-memory.dmp

        memory/3684-93-0x000001ADEEAF0000-0x000001ADEEB00000-memory.dmp

        memory/3684-92-0x000001ADEEA50000-0x000001ADEEA60000-memory.dmp

        memory/3684-91-0x000001ADEEA40000-0x000001ADEEA50000-memory.dmp

        memory/3684-98-0x000001ADEEA80000-0x000001ADEEA90000-memory.dmp

        memory/3684-97-0x000001ADEEA70000-0x000001ADEEA80000-memory.dmp

        memory/3684-96-0x000001ADEEB10000-0x000001ADEEB20000-memory.dmp

        memory/3684-95-0x000001ADEEA60000-0x000001ADEEA70000-memory.dmp

        memory/3684-94-0x000001ADEEB00000-0x000001ADEEB10000-memory.dmp

        memory/3684-100-0x000001ADEEB20000-0x000001ADEEB30000-memory.dmp

        memory/3684-102-0x000001AD8DD20000-0x000001AD8DD21000-memory.dmp

        memory/3684-110-0x000001ADEEA90000-0x000001ADEEAA0000-memory.dmp

        memory/3684-112-0x000001ADEEB30000-0x000001ADEEB40000-memory.dmp

        memory/3684-114-0x000001ADEEB40000-0x000001ADEEB50000-memory.dmp

        memory/3684-113-0x000001ADEEAA0000-0x000001ADEEAB0000-memory.dmp

        memory/3684-115-0x000001ADECA20000-0x000001ADECA21000-memory.dmp

        memory/3684-116-0x000001ADEEAB0000-0x000001ADEEAC0000-memory.dmp

        memory/3684-118-0x000001ADEEAC0000-0x000001ADEEAD0000-memory.dmp

        memory/3684-120-0x000001ADEEAE0000-0x000001ADEEAF0000-memory.dmp

        memory/3684-121-0x000001ADEEB50000-0x000001ADEEB60000-memory.dmp

        memory/3684-123-0x000001ADEEAF0000-0x000001ADEEB00000-memory.dmp

        memory/3684-124-0x000001ADEEB00000-0x000001ADEEB10000-memory.dmp

        memory/3684-125-0x000001ADEEB10000-0x000001ADEEB20000-memory.dmp

        memory/3684-126-0x000001ADECA20000-0x000001ADECA21000-memory.dmp

        memory/3684-127-0x000001ADEE1E0000-0x000001ADEE24F000-memory.dmp

        memory/3684-128-0x000001ADEE2C0000-0x000001ADEE2C9000-memory.dmp

        memory/3684-129-0x000001ADEEB20000-0x000001ADEEB30000-memory.dmp

        memory/3684-131-0x000001ADEEB30000-0x000001ADEEB40000-memory.dmp

        memory/3684-133-0x000001ADEEB40000-0x000001ADEEB50000-memory.dmp

        memory/3684-135-0x000001ADEEB60000-0x000001ADEEB70000-memory.dmp

        memory/3684-138-0x000001ADEEB50000-0x000001ADEEB60000-memory.dmp

        memory/3684-144-0x000001ADEEB60000-0x000001ADEEB70000-memory.dmp

        memory/3684-147-0x000001ADEEB70000-0x000001ADEEB80000-memory.dmp

        memory/3684-150-0x000001ADEEB80000-0x000001ADEEB90000-memory.dmp

        memory/3684-155-0x000001ADEEB70000-0x000001ADEEB80000-memory.dmp

        memory/3684-156-0x000001ADEEB80000-0x000001ADEEB90000-memory.dmp

        memory/3684-158-0x000001ADEEB90000-0x000001ADEEBA0000-memory.dmp

        memory/3684-164-0x000001ADEEBA0000-0x000001ADEEBB0000-memory.dmp

        memory/3684-167-0x000001ADEEB90000-0x000001ADEEBA0000-memory.dmp

        memory/3684-171-0x000001ADEEBA0000-0x000001ADEEBB0000-memory.dmp

        memory/3684-174-0x000001ADEEBB0000-0x000001ADEEBC0000-memory.dmp

        memory/3684-177-0x000001ADEEBB0000-0x000001ADEEBC0000-memory.dmp

        memory/3684-181-0x000001ADEEBC0000-0x000001ADEEBD0000-memory.dmp

        memory/3684-185-0x000001ADEEBD0000-0x000001ADEEBE0000-memory.dmp

        memory/3684-188-0x000001ADEEBC0000-0x000001ADEEBD0000-memory.dmp

        memory/3684-190-0x000001ADEEBD0000-0x000001ADEEBE0000-memory.dmp

        memory/3684-203-0x000001ADEEBE0000-0x000001ADEEBF0000-memory.dmp

        memory/3684-210-0x000001ADEEBE0000-0x000001ADEEBF0000-memory.dmp

        memory/3684-213-0x000001ADEEBF0000-0x000001ADEEC00000-memory.dmp

        memory/3684-219-0x000001ADEEC00000-0x000001ADEEC10000-memory.dmp

        memory/3684-222-0x000001ADEEC10000-0x000001ADEEC20000-memory.dmp

        memory/3684-223-0x000001ADEEC20000-0x000001ADEEC30000-memory.dmp

        memory/3684-227-0x000001ADEEBF0000-0x000001ADEEC00000-memory.dmp

        memory/3684-228-0x000001ADEEC30000-0x000001ADEEC40000-memory.dmp

        memory/3684-230-0x000001ADEEC00000-0x000001ADEEC10000-memory.dmp

        memory/3684-234-0x000001ADEEC20000-0x000001ADEEC30000-memory.dmp

        memory/3684-236-0x000001ADEEC30000-0x000001ADEEC40000-memory.dmp

        memory/3684-238-0x000001ADEEC40000-0x000001ADEEC50000-memory.dmp