Analysis
- user interaction
yes - max time kernel
149s - max time network
4s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
- submitted
29/05/2026, 21:33
General
- Target 67 (1).jar
- Size 762KB
- Sample260529-1ephwaez2s
- SHA256 0328c6485cda3798192c9da6b4a494da8c2e23cbe440d8dd3c6678f3ca7c3c25
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
- Suspicious use of AdjustPrivilegeToken 64 IoCs
- Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -jar "C:\Users\Admin\AppData\Local\Temp\67 (1).jar"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2108-2-0x00000200C6460000-0x00000200C66D0000-memory.dmp
memory/2108-14-0x00000200C57D0000-0x00000200C57D1000-memory.dmp
memory/2108-21-0x00000200C66D0000-0x00000200C66E0000-memory.dmp
memory/2108-22-0x00000200C57D0000-0x00000200C57D1000-memory.dmp
memory/2108-24-0x00000200C66E0000-0x00000200C66F0000-memory.dmp
memory/2108-26-0x00000200C66F0000-0x00000200C6700000-memory.dmp
memory/2108-34-0x00000200C6720000-0x00000200C6730000-memory.dmp
memory/2108-35-0x00000200C6730000-0x00000200C6740000-memory.dmp
memory/2108-30-0x00000200C6710000-0x00000200C6720000-memory.dmp
memory/2108-37-0x00000200C6740000-0x00000200C6750000-memory.dmp
memory/2108-29-0x00000200C6700000-0x00000200C6710000-memory.dmp
memory/2108-44-0x00000200C6750000-0x00000200C6760000-memory.dmp
memory/2108-45-0x00000200C6760000-0x00000200C6770000-memory.dmp
memory/2108-48-0x00000200C6770000-0x00000200C6780000-memory.dmp
memory/2108-47-0x00000200C66D0000-0x00000200C66E0000-memory.dmp
memory/2108-42-0x00000200C6460000-0x00000200C66D0000-memory.dmp
memory/2108-50-0x00000200C6780000-0x00000200C6790000-memory.dmp
memory/2108-49-0x00000200C66E0000-0x00000200C66F0000-memory.dmp
memory/2108-51-0x00000200C57D0000-0x00000200C57D1000-memory.dmp
memory/2108-54-0x00000200C66F0000-0x00000200C6700000-memory.dmp
memory/2108-55-0x00000200C6790000-0x00000200C67A0000-memory.dmp
memory/2108-57-0x00000200C6700000-0x00000200C6710000-memory.dmp
memory/2108-59-0x00000200C67A0000-0x00000200C67B0000-memory.dmp
memory/2108-58-0x00000200C6710000-0x00000200C6720000-memory.dmp
memory/2108-64-0x00000200C67B0000-0x00000200C67C0000-memory.dmp
memory/2108-63-0x00000200C6730000-0x00000200C6740000-memory.dmp
memory/2108-65-0x00000200C57D0000-0x00000200C57D1000-memory.dmp
memory/2108-75-0x00000200C67D0000-0x00000200C67E0000-memory.dmp
memory/2108-74-0x00000200C67C0000-0x00000200C67D0000-memory.dmp
memory/2108-73-0x00000200C6720000-0x00000200C6730000-memory.dmp
memory/2108-78-0x00000200C67E0000-0x00000200C67F0000-memory.dmp
memory/2108-77-0x00000200C6740000-0x00000200C6750000-memory.dmp
memory/2108-84-0x00000200C6760000-0x00000200C6770000-memory.dmp
memory/2108-83-0x00000200C6800000-0x00000200C6810000-memory.dmp
memory/2108-82-0x00000200C67F0000-0x00000200C6800000-memory.dmp
memory/2108-81-0x00000200C6750000-0x00000200C6760000-memory.dmp
memory/2108-86-0x00000200C6770000-0x00000200C6780000-memory.dmp
memory/2108-87-0x00000200C6810000-0x00000200C6820000-memory.dmp
memory/2108-89-0x00000200E53D0000-0x00000200E53D1000-memory.dmp
memory/2108-95-0x00000200C6780000-0x00000200C6790000-memory.dmp
memory/2108-96-0x00000200C6820000-0x00000200C6830000-memory.dmp
memory/2108-101-0x00000200C6830000-0x00000200C6840000-memory.dmp
memory/2108-100-0x00000200C6790000-0x00000200C67A0000-memory.dmp
memory/2108-104-0x00000200C67A0000-0x00000200C67B0000-memory.dmp
memory/2108-105-0x00000200C6840000-0x00000200C6850000-memory.dmp
memory/2108-106-0x00000200C57D0000-0x00000200C57D1000-memory.dmp
memory/2108-107-0x00000200C67B0000-0x00000200C67C0000-memory.dmp
memory/2108-109-0x00000200C67C0000-0x00000200C67D0000-memory.dmp
memory/2108-111-0x00000200C6850000-0x00000200C6860000-memory.dmp
memory/2108-110-0x00000200C67D0000-0x00000200C67E0000-memory.dmp
memory/2108-114-0x00000200C67E0000-0x00000200C67F0000-memory.dmp
memory/2108-116-0x00000200C67F0000-0x00000200C6800000-memory.dmp
memory/2108-117-0x00000200C6800000-0x00000200C6810000-memory.dmp
memory/2108-118-0x00000200C6860000-0x00000200C6870000-memory.dmp
memory/2108-119-0x00000200C57D0000-0x00000200C57D1000-memory.dmp
memory/2108-121-0x00000200C6810000-0x00000200C6820000-memory.dmp
memory/2108-122-0x00000200C6870000-0x00000200C6880000-memory.dmp
memory/2108-123-0x00000200C57D0000-0x00000200C57D1000-memory.dmp
memory/2108-126-0x00000200C6880000-0x00000200C6890000-memory.dmp
memory/2108-125-0x00000200C6820000-0x00000200C6830000-memory.dmp
memory/2108-127-0x00000200C6830000-0x00000200C6840000-memory.dmp
memory/2108-130-0x00000200C6840000-0x00000200C6850000-memory.dmp
memory/2108-131-0x00000200C6890000-0x00000200C68A0000-memory.dmp
memory/2108-133-0x00000200C6850000-0x00000200C6860000-memory.dmp
memory/2108-134-0x00000200C6860000-0x00000200C6870000-memory.dmp
memory/2108-136-0x00000200C6870000-0x00000200C6880000-memory.dmp
memory/2108-137-0x00000200C6880000-0x00000200C6890000-memory.dmp
memory/2108-139-0x00000200C6890000-0x00000200C68A0000-memory.dmp
memory/2108-144-0x00000200C68A0000-0x00000200C68B0000-memory.dmp
memory/2108-147-0x00000200C68B0000-0x00000200C68C0000-memory.dmp
memory/2108-149-0x00000200C68A0000-0x00000200C68B0000-memory.dmp
memory/2108-151-0x00000200C68B0000-0x00000200C68C0000-memory.dmp
memory/2108-153-0x00000200C68C0000-0x00000200C68D0000-memory.dmp
memory/2108-155-0x00000200C68C0000-0x00000200C68D0000-memory.dmp
memory/2108-158-0x00000200C68D0000-0x00000200C68E0000-memory.dmp
memory/2108-160-0x00000200C68D0000-0x00000200C68E0000-memory.dmp
memory/2108-163-0x00000200C68E0000-0x00000200C68F0000-memory.dmp
memory/2108-168-0x00000200C68E0000-0x00000200C68F0000-memory.dmp
memory/2108-173-0x00000200C68F0000-0x00000200C6900000-memory.dmp