Analysis
- max time kernel
148s - max time network
148s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
- submitted
29/04/2026, 10:39
General
- Target _bc709685cdfebcfa3f8187f31227cba46644ff09e2e97cc374336dd922c5d793.jar
- Size 949KB
- Sample260429-mp52qaex5n
- SHA256 bc709685cdfebcfa3f8187f31227cba46644ff09e2e97cc374336dd922c5d793
Malware Config
Signatures
- Loads dropped DLL 2 IoCs
- Suspicious behavior: EnumeratesProcesses 1 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -jar C:\Users\Admin\AppData\Local\Temp\_bc709685cdfebcfa3f8187f31227cba46644ff09e2e97cc374336dd922c5d793.jar1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Java\jre-1.8\bin\java.exe"C:\Program Files\Java\jre-1.8\bin\java" -jar C:\Users\Admin\AppData\Local\Temp\_bc709685cdfebcfa3f8187f31227cba46644ff09e2e97cc374336dd922c5d793.jar child2⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Windows\System32\fc.exe"C:\Windows\System32\fc.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
jna5457929374041904855.dll
83aa4cc77f591dfc2374580bbd95f6ba_076c77e4-e6c7-4726-8711-cba350c3cc7f
memory/2584-72-0x000001C708C80000-0x000001C70A91D000-memory.dmp
memory/2584-54-0x000001C7076A0000-0x000001C7076D1000-memory.dmp
memory/2584-48-0x000001C707160000-0x000001C707161000-memory.dmp
memory/2584-60-0x0000000067D40000-0x0000000068534000-memory.dmp
memory/2584-59-0x000001C708C80000-0x000001C70A91D000-memory.dmp
memory/4328-26-0x00000255ED820000-0x00000255EDA90000-memory.dmp
memory/4328-25-0x00000255FFE80000-0x00000255FFE8C000-memory.dmp
memory/4328-24-0x00000255EC1F0000-0x00000255EC221000-memory.dmp
memory/4328-2-0x00000255ED820000-0x00000255EDA90000-memory.dmp
memory/4328-11-0x00000255ED800000-0x00000255ED801000-memory.dmp
memory/5936-40-0x000001C91A1B0000-0x000001C91A1B1000-memory.dmp
memory/5936-52-0x000001C935FF0000-0x000001C935FFC000-memory.dmp
memory/5936-53-0x000001C91B9D0000-0x000001C91BC40000-memory.dmp
memory/5936-51-0x000001C91A150000-0x000001C91A181000-memory.dmp
memory/5936-29-0x000001C91B9D0000-0x000001C91BC40000-memory.dmp