Analysis

  • max time kernel
    28s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260130-en
  • resource tags

    arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    27/04/2026, 02:45

General

  • Target
    0188c2a3c9047d078e9897a4b0d24ef69b926a8a1dadef8ce48c3fd65cef4c9d.jar
  • Size 4.3MB
  • Sample260427-c8ry4ady9j
  • SHA256 0188c2a3c9047d078e9897a4b0d24ef69b926a8a1dadef8ce48c3fd65cef4c9d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\0188c2a3c9047d078e9897a4b0d24ef69b926a8a1dadef8ce48c3fd65cef4c9d.jar
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1828

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/1828-2-0x0000023951C00000-0x0000023951E70000-memory.dmp

        memory/1828-17-0x00000239502E0000-0x00000239502E1000-memory.dmp

        memory/1828-19-0x00000239502E0000-0x00000239502E1000-memory.dmp

        memory/1828-23-0x0000023951E70000-0x0000023951E80000-memory.dmp

        memory/1828-26-0x0000023951E80000-0x0000023951E90000-memory.dmp

        memory/1828-29-0x0000023951E90000-0x0000023951EA0000-memory.dmp

        memory/1828-31-0x0000023951EA0000-0x0000023951EB0000-memory.dmp

        memory/1828-33-0x0000023951C00000-0x0000023951E70000-memory.dmp

        memory/1828-34-0x0000023951EB0000-0x0000023951EC0000-memory.dmp

        memory/1828-36-0x0000023951EC0000-0x0000023951ED0000-memory.dmp

        memory/1828-39-0x0000023951ED0000-0x0000023951EE0000-memory.dmp

        memory/1828-41-0x000002396BAD0000-0x000002396BBA6000-memory.dmp

        memory/1828-42-0x0000023951E70000-0x0000023951E80000-memory.dmp

        memory/1828-43-0x0000023951E80000-0x0000023951E90000-memory.dmp

        memory/1828-44-0x0000023951E90000-0x0000023951EA0000-memory.dmp

        memory/1828-45-0x0000023951EA0000-0x0000023951EB0000-memory.dmp

        memory/1828-46-0x0000023951EB0000-0x0000023951EC0000-memory.dmp

        memory/1828-47-0x0000023951EC0000-0x0000023951ED0000-memory.dmp

        memory/1828-48-0x0000023951ED0000-0x0000023951EE0000-memory.dmp