Analysis
- user interaction
yes - max time kernel
30s - max time network
32s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260618-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
23/06/2026, 12:36
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5wmh8bbdurq.jar
Resource
win10v2004-20260513-en
9 signatures
30 seconds
Behavioral task
behavioral2
Sample
5wmh8bbdurq.jar
Resource
win11ltsc2024-20260618-en
3 signatures
30 seconds
General
- Target 5wmh8bbdurq.jar
- Size 2.9MB
- Sample260623-ps7e3acy3k
- SHA256 faa422f391d9b2ebaa2332527b73b8e35e85c998f5f9dc45ec6d99fdb3b7247f
- MD5 824fd4a1444ed161736816f92bc1d19b
- SHA1 3b97167ffab2117d101d0f06d58e07040398b6f0
- SHA512 fd21f64ec2c74c6b8f7c169e76ff60466b3e700848fed7dd32b9b003ef1aab44fd8e055f9a2b9ad53eabd1eeba8a1c1b2d42e44718b7735283a6814816128ecb
- SSDEEP 49152:J+WZZxZO9gaWlfJA/TLmEZAitMtgHFXl32NjN5C6Zjb4dKG7gfs+oqxz2UKHVgi:JHhZLRiLj5ENHCxBgzhxJi
- TLSH T1E2E53390F3F48603E19764B68597C0D744562BC7E6340A8E49FB37FA6CE57ACBC90889
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 26 IoCs
pid Process 1572 java.exe 1572 java.exe 1572 java.exe 1572 java.exe 1572 java.exe 1572 java.exe 1572 java.exe 1572 java.exe 1572 java.exe 1572 java.exe 1572 java.exe 1572 java.exe 1572 java.exe 1572 java.exe 1572 java.exe 1572 java.exe 1572 java.exe 1572 java.exe 1572 java.exe 1572 java.exe 1572 java.exe 1572 java.exe 1572 java.exe 1572 java.exe 1572 java.exe 1572 java.exe - Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe Token: SeDebugPrivilege 1572 java.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1572 java.exe 1572 java.exe 1572 java.exe 1572 java.exe