Analysis
- max time kernel
149s - max time network
150s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
- submitted
28/05/2026, 00:52
General
- Target 25d7aee4f46be375411d2186013137fd8aa623570846d18c5af49465b0d80a05.exe
- Size 90KB
- Sample260528-a8e87act4l
- SHA256 25d7aee4f46be375411d2186013137fd8aa623570846d18c5af49465b0d80a05
Score
1/10
Malware Config
Signatures
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\25d7aee4f46be375411d2186013137fd8aa623570846d18c5af49465b0d80a05.exe"C:\Users\Admin\AppData\Local\Temp\25d7aee4f46be375411d2186013137fd8aa623570846d18c5af49465b0d80a05.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaw.exe"C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaw.exe" -jar "C:\Users\Admin\AppData\Local\Temp\xj8279.tmp.jar"2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
xj8279.tmp.jar
memory/1044-15-0x00007FF6DFFD0000-0x00007FF6DFFED000-memory.dmp
memory/3196-4-0x0000011C162A0000-0x0000011C16510000-memory.dmp
memory/3196-13-0x0000011C16280000-0x0000011C16281000-memory.dmp
memory/3196-17-0x0000011C16280000-0x0000011C16281000-memory.dmp
memory/3196-18-0x0000011C162A0000-0x0000011C16510000-memory.dmp