Analysis

  • user interaction
    yes
  • max time kernel
    30s
  • max time network
    32s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260618-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    23/06/2026, 12:36

General

  • Target
    5wmh8bbdurq.jar
  • Size 2.9MB
  • Sample260623-ps7e3acy3k
  • SHA256 faa422f391d9b2ebaa2332527b73b8e35e85c998f5f9dc45ec6d99fdb3b7247f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 26 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\5wmh8bbdurq.jar
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:1572

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/1572-2-0x000001F92F460000-0x000001F92F6D0000-memory.dmp

        memory/1572-11-0x000001F92CF00000-0x000001F92CF01000-memory.dmp

        memory/1572-20-0x000001F92CF00000-0x000001F92CF01000-memory.dmp

        memory/1572-22-0x000001F92F6D0000-0x000001F92F6E0000-memory.dmp

        memory/1572-26-0x000001F92F6F0000-0x000001F92F700000-memory.dmp

        memory/1572-25-0x000001F92F6E0000-0x000001F92F6F0000-memory.dmp

        memory/1572-29-0x000001F92F700000-0x000001F92F710000-memory.dmp

        memory/1572-31-0x000001F92F710000-0x000001F92F720000-memory.dmp

        memory/1572-34-0x000001F92F720000-0x000001F92F730000-memory.dmp

        memory/1572-35-0x000001F92F730000-0x000001F92F740000-memory.dmp

        memory/1572-43-0x000001F92F750000-0x000001F92F760000-memory.dmp

        memory/1572-38-0x000001F92F740000-0x000001F92F750000-memory.dmp

        memory/1572-53-0x000001F92F790000-0x000001F92F7A0000-memory.dmp

        memory/1572-56-0x000001F92F7A0000-0x000001F92F7B0000-memory.dmp

        memory/1572-55-0x000001F92F6F0000-0x000001F92F700000-memory.dmp

        memory/1572-60-0x000001F92F7B0000-0x000001F92F7C0000-memory.dmp

        memory/1572-58-0x000001F92CF00000-0x000001F92CF01000-memory.dmp

        memory/1572-54-0x000001F92F6E0000-0x000001F92F6F0000-memory.dmp

        memory/1572-51-0x000001F92F770000-0x000001F92F780000-memory.dmp

        memory/1572-52-0x000001F92F780000-0x000001F92F790000-memory.dmp

        memory/1572-50-0x000001F92F6D0000-0x000001F92F6E0000-memory.dmp

        memory/1572-44-0x000001F92F760000-0x000001F92F770000-memory.dmp

        memory/1572-42-0x000001F92F460000-0x000001F92F6D0000-memory.dmp

        memory/1572-63-0x000001F92F7C0000-0x000001F92F7D0000-memory.dmp

        memory/1572-62-0x000001F92F700000-0x000001F92F710000-memory.dmp

        memory/1572-67-0x000001F92F710000-0x000001F92F720000-memory.dmp

        memory/1572-68-0x000001F92F7D0000-0x000001F92F7E0000-memory.dmp

        memory/1572-72-0x000001F92F7E0000-0x000001F92F7F0000-memory.dmp

        memory/1572-70-0x000001F92F720000-0x000001F92F730000-memory.dmp

        memory/1572-83-0x000001F92F730000-0x000001F92F740000-memory.dmp

        memory/1572-93-0x000001F92F850000-0x000001F92F860000-memory.dmp

        memory/1572-95-0x000001F94F0B0000-0x000001F94F0B1000-memory.dmp

        memory/1572-105-0x000001F92F860000-0x000001F92F870000-memory.dmp

        memory/1572-104-0x000001F92F760000-0x000001F92F770000-memory.dmp

        memory/1572-103-0x000001F92F750000-0x000001F92F760000-memory.dmp

        memory/1572-92-0x000001F92F820000-0x000001F92F830000-memory.dmp

        memory/1572-90-0x000001F92F840000-0x000001F92F850000-memory.dmp

        memory/1572-89-0x000001F92F830000-0x000001F92F840000-memory.dmp

        memory/1572-87-0x000001F92F810000-0x000001F92F820000-memory.dmp

        memory/1572-86-0x000001F92F7F0000-0x000001F92F800000-memory.dmp

        memory/1572-91-0x000001F92F740000-0x000001F92F750000-memory.dmp

        memory/1572-88-0x000001F92F800000-0x000001F92F810000-memory.dmp

        memory/1572-106-0x000001F92CF00000-0x000001F92CF01000-memory.dmp

        memory/1572-107-0x000001F92F780000-0x000001F92F790000-memory.dmp

        memory/1572-109-0x000001F92F770000-0x000001F92F780000-memory.dmp

        memory/1572-110-0x000001F92F790000-0x000001F92F7A0000-memory.dmp

        memory/1572-112-0x000001F92F7A0000-0x000001F92F7B0000-memory.dmp

        memory/1572-113-0x000001F92F7B0000-0x000001F92F7C0000-memory.dmp

        memory/1572-117-0x000001F92F7C0000-0x000001F92F7D0000-memory.dmp

        memory/1572-118-0x000001F92F870000-0x000001F92F880000-memory.dmp

        memory/1572-119-0x000001F92CF00000-0x000001F92CF01000-memory.dmp

        memory/1572-120-0x000001F92F7D0000-0x000001F92F7E0000-memory.dmp

        memory/1572-121-0x000001F92F7E0000-0x000001F92F7F0000-memory.dmp

        memory/1572-122-0x000001F92F840000-0x000001F92F850000-memory.dmp

        memory/1572-123-0x000001F92F800000-0x000001F92F810000-memory.dmp

        memory/1572-124-0x000001F92F830000-0x000001F92F840000-memory.dmp

        memory/1572-125-0x000001F92F820000-0x000001F92F830000-memory.dmp

        memory/1572-126-0x000001F92F850000-0x000001F92F860000-memory.dmp

        memory/1572-128-0x000001F92F860000-0x000001F92F870000-memory.dmp

        memory/1572-129-0x000001F92F880000-0x000001F92F890000-memory.dmp

        memory/1572-133-0x000001F92CF00000-0x000001F92CF01000-memory.dmp

        memory/1572-137-0x000001F92CF00000-0x000001F92CF01000-memory.dmp

        memory/1572-139-0x000001F92F870000-0x000001F92F880000-memory.dmp

        memory/1572-145-0x000001F92CF00000-0x000001F92CF01000-memory.dmp

        memory/1572-147-0x000001F92F880000-0x000001F92F890000-memory.dmp

        memory/1572-148-0x000001F92F890000-0x000001F92F8A0000-memory.dmp

        memory/1572-151-0x000001F92F8A0000-0x000001F92F8B0000-memory.dmp

        memory/1572-153-0x000001F92F8B0000-0x000001F92F8C0000-memory.dmp

        memory/1572-155-0x000001F92F8C0000-0x000001F92F8D0000-memory.dmp

        memory/1572-157-0x000001F92F8D0000-0x000001F92F8E0000-memory.dmp

        memory/1572-159-0x000001F92F8E0000-0x000001F92F8F0000-memory.dmp

        memory/1572-161-0x000001F92F8F0000-0x000001F92F900000-memory.dmp

        memory/1572-163-0x000001F92F900000-0x000001F92F910000-memory.dmp

        memory/1572-166-0x000001F92F910000-0x000001F92F920000-memory.dmp

        memory/1572-168-0x000001F92F890000-0x000001F92F8A0000-memory.dmp

        memory/1572-169-0x000001F92F920000-0x000001F92F930000-memory.dmp

        memory/1572-171-0x000001F92F930000-0x000001F92F940000-memory.dmp

        memory/1572-174-0x000001F92F940000-0x000001F92F950000-memory.dmp

        memory/1572-173-0x000001F92F8A0000-0x000001F92F8B0000-memory.dmp

        memory/1572-177-0x000001F92F8B0000-0x000001F92F8C0000-memory.dmp

        memory/1572-178-0x000001F92F950000-0x000001F92F960000-memory.dmp

        memory/1572-179-0x000001F92F8C0000-0x000001F92F8D0000-memory.dmp

        memory/1572-180-0x000001F92F960000-0x000001F92F970000-memory.dmp

        memory/1572-184-0x000001F92F970000-0x000001F92F980000-memory.dmp

        memory/1572-183-0x000001F92F8D0000-0x000001F92F8E0000-memory.dmp

        memory/1572-186-0x000001F92F8E0000-0x000001F92F8F0000-memory.dmp

        memory/1572-187-0x000001F92F980000-0x000001F92F990000-memory.dmp

        memory/1572-189-0x000001F92F8F0000-0x000001F92F900000-memory.dmp

        memory/1572-190-0x000001F92F990000-0x000001F92F9A0000-memory.dmp

        memory/1572-192-0x000001F92F900000-0x000001F92F910000-memory.dmp

        memory/1572-193-0x000001F92F9A0000-0x000001F92F9B0000-memory.dmp

        memory/1572-196-0x000001F92F910000-0x000001F92F920000-memory.dmp

        memory/1572-197-0x000001F92F9B0000-0x000001F92F9C0000-memory.dmp

        memory/1572-205-0x000001F92F9C0000-0x000001F92F9D0000-memory.dmp

        memory/1572-204-0x000001F92F920000-0x000001F92F930000-memory.dmp

        memory/1572-209-0x000001F92F930000-0x000001F92F940000-memory.dmp

        memory/1572-210-0x000001F92F9D0000-0x000001F92F9E0000-memory.dmp

        memory/1572-208-0x000001F92CF00000-0x000001F92CF01000-memory.dmp

        memory/1572-214-0x000001F92F9E0000-0x000001F92F9F0000-memory.dmp

        memory/1572-213-0x000001F92F940000-0x000001F92F950000-memory.dmp

        memory/1572-216-0x000001F92F950000-0x000001F92F960000-memory.dmp

        memory/1572-218-0x000001F92F960000-0x000001F92F970000-memory.dmp

        memory/1572-219-0x000001F92F9F0000-0x000001F92FA00000-memory.dmp

        memory/1572-221-0x000001F92F970000-0x000001F92F980000-memory.dmp