Analysis
- max time kernel
148s - max time network
147s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
- submitted
29/04/2026, 10:39
General
- Target _bc709685cdfebcfa3f8187f31227cba46644ff09e2e97cc374336dd922c5d793.jar
- Size 949KB
- Sample260429-mp52qaex5n
- SHA256 bc709685cdfebcfa3f8187f31227cba46644ff09e2e97cc374336dd922c5d793
Malware Config
Signatures
- Loads dropped DLL 2 IoCs
- Suspicious behavior: EnumeratesProcesses 1 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -jar C:\Users\Admin\AppData\Local\Temp\_bc709685cdfebcfa3f8187f31227cba46644ff09e2e97cc374336dd922c5d793.jar1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Java\jre-1.8\bin\java.exe"C:\Program Files\Java\jre-1.8\bin\java" -jar C:\Users\Admin\AppData\Local\Temp\_bc709685cdfebcfa3f8187f31227cba46644ff09e2e97cc374336dd922c5d793.jar child2⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Windows\System32\expand.exe"C:\Windows\System32\expand.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
3903daac9bc4a3b7.timestamp
jna2537697786727640816.dll
83aa4cc77f591dfc2374580bbd95f6ba_eef68097-d4d4-4bb1-9af8-e1ccd64e5421
memory/3460-65-0x000001D919C90000-0x000001D91B92D000-memory.dmp
memory/3460-52-0x0000000067D40000-0x0000000068534000-memory.dmp
memory/3460-51-0x000001D919C90000-0x000001D91B92D000-memory.dmp
memory/3460-48-0x000001D9181D0000-0x000001D9181D1000-memory.dmp
memory/4396-40-0x000001A014D90000-0x000001A014D91000-memory.dmp
memory/4396-29-0x000001A0163E0000-0x000001A016650000-memory.dmp
memory/4396-62-0x000001A030300000-0x000001A0303AD000-memory.dmp
memory/4396-63-0x000001A030AF0000-0x000001A030AFC000-memory.dmp
memory/4396-64-0x000001A0163E0000-0x000001A016650000-memory.dmp
memory/4812-2-0x0000024EB5210000-0x0000024EB5480000-memory.dmp
memory/4812-24-0x0000024ECF140000-0x0000024ECF1ED000-memory.dmp
memory/4812-25-0x0000024ECF940000-0x0000024ECF94C000-memory.dmp
memory/4812-26-0x0000024EB5210000-0x0000024EB5480000-memory.dmp
memory/4812-11-0x0000024EB51F0000-0x0000024EB51F1000-memory.dmp