Analysis
- max time kernel
149s - max time network
47s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
07/05/2026, 14:58
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ayoknmmpmk.jar
Resource
win10v2004-20260130-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
ayoknmmpmk.jar
Resource
win11-20260130-en
3 signatures
150 seconds
General
- Target ayoknmmpmk.jar
- Size 2.7MB
- Sample260507-sb92eae191
- SHA256 3794631c365b2a48622759fffc7e17a21966805d7a0969e4b96bcb5c06dfa634
- MD5 07c6929ef831fe0217b6761277d57748
- SHA1 bc32b3afd675764f41b1e18654b7d3193e55168f
- SHA512 2d1eb4940ae1fd9e9fb6709951040e7cdbb9b051e18eaa422cfe9b838cabd39e709e1beb2419c00ad00ab6a817d0499c16624ea59f3478636682e103097a8f8c
- SSDEEP 49152:0RSiJy6bm23ACKQHc+Cc/WrdZyzRXlHbUherlfJA/VUubCvf3wIa4:0RSmFbmFCKh+CaWDaR17TEIp
- TLSH T17CD53331235EBC7BFE3493DDE753ACE09AAB53854CC6259D56124A0E4839B38DF02726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe - Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4964 java.exe 4964 java.exe