Analysis
- user interaction
yes - max time kernel
599s - max time network
433s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
- submitted
24/06/2026, 04:25
General
- Target HEEET.jar
- Size 639KB
- Sample260624-e2erash18z
- SHA256 5a0e8473889eec925b368c8d50e202c79aec0fa1ded7cec267227bda315f92fb
Malware Config
Signatures
- Adds Run key to start application 2 TTPs 1 IoCs
- Suspicious use of SetWindowsHookEx 4 IoCs
- Suspicious use of WriteProcessMemory 3 IoCs
- Views/modifies file attributes 1 TTPs 1 IoCs
Processes
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -jar C:\Users\Admin\AppData\Local\Temp\HEEET.jar1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Windows\SYSTEM32\attrib.exeattrib +H C:\Users\Admin\AppData\Roaming\Microsoft\.tmp\1782275173246.tmp2⤵
- Views/modifies file attributes
-
-
C:\Windows\SYSTEM32\cmd.execmd.exe /c "REG ADD HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /v Home /d "C:\Program Files\Java\jre-1.8\bin\javaw.exe -jar C:\Users\Admin\AppData\Roaming\Microsoft\.tmp\1782275173246.tmp" /f"2⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\reg.exeREG ADD HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /v Home /d "C:\Program Files\Java\jre-1.8\bin\javaw.exe -jar C:\Users\Admin\AppData\Roaming\Microsoft\.tmp\1782275173246.tmp" /f3⤵
- Adds Run key to start application
-
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
1782275173246.tmp
memory/1028-2-0x0000026543E40000-0x00000265440B0000-memory.dmp
memory/1028-15-0x00000265440B0000-0x00000265440C0000-memory.dmp
memory/1028-17-0x00000265440C0000-0x00000265440D0000-memory.dmp
memory/1028-19-0x00000265440D0000-0x00000265440E0000-memory.dmp
memory/1028-21-0x00000265440E0000-0x00000265440F0000-memory.dmp
memory/1028-23-0x00000265440F0000-0x0000026544100000-memory.dmp
memory/1028-25-0x0000026544100000-0x0000026544110000-memory.dmp
memory/1028-27-0x0000026544110000-0x0000026544120000-memory.dmp
memory/1028-29-0x0000026544120000-0x0000026544130000-memory.dmp
memory/1028-36-0x0000026544130000-0x0000026544140000-memory.dmp
memory/1028-39-0x0000026543E40000-0x00000265440B0000-memory.dmp
memory/1028-40-0x0000026544140000-0x0000026544150000-memory.dmp
memory/1028-42-0x0000026544150000-0x0000026544160000-memory.dmp
memory/1028-41-0x00000265440B0000-0x00000265440C0000-memory.dmp
memory/1028-43-0x0000026543E20000-0x0000026543E21000-memory.dmp
memory/1028-44-0x0000026543E20000-0x0000026543E21000-memory.dmp
memory/1028-47-0x0000026544160000-0x0000026544170000-memory.dmp
memory/1028-46-0x00000265440C0000-0x00000265440D0000-memory.dmp
memory/1028-51-0x0000026544170000-0x0000026544180000-memory.dmp
memory/1028-50-0x00000265440D0000-0x00000265440E0000-memory.dmp
memory/1028-53-0x00000265440E0000-0x00000265440F0000-memory.dmp
memory/1028-54-0x0000026544180000-0x0000026544190000-memory.dmp
memory/1028-59-0x0000026544190000-0x00000265441A0000-memory.dmp
memory/1028-58-0x00000265440F0000-0x0000026544100000-memory.dmp
memory/1028-62-0x00000265441A0000-0x00000265441B0000-memory.dmp
memory/1028-61-0x0000026544100000-0x0000026544110000-memory.dmp
memory/1028-63-0x0000026543E20000-0x0000026543E21000-memory.dmp
memory/1028-65-0x0000026544110000-0x0000026544120000-memory.dmp
memory/1028-66-0x00000265441B0000-0x00000265441C0000-memory.dmp
memory/1028-68-0x0000026543E20000-0x0000026543E21000-memory.dmp
memory/1028-70-0x00000265441C0000-0x00000265441D0000-memory.dmp
memory/1028-69-0x0000026544120000-0x0000026544130000-memory.dmp
memory/1028-71-0x0000026543E20000-0x0000026543E21000-memory.dmp
memory/1028-72-0x0000026544130000-0x0000026544140000-memory.dmp
memory/1028-74-0x0000026544140000-0x0000026544150000-memory.dmp
memory/1028-75-0x0000026544150000-0x0000026544160000-memory.dmp
memory/1028-76-0x0000026544160000-0x0000026544170000-memory.dmp
memory/1028-77-0x0000026544170000-0x0000026544180000-memory.dmp
memory/1028-78-0x0000026544180000-0x0000026544190000-memory.dmp
memory/1028-79-0x0000026544190000-0x00000265441A0000-memory.dmp
memory/1028-80-0x00000265441A0000-0x00000265441B0000-memory.dmp
memory/1028-81-0x00000265441B0000-0x00000265441C0000-memory.dmp
memory/1028-82-0x00000265441C0000-0x00000265441D0000-memory.dmp
memory/1028-85-0x00000265441D0000-0x00000265441E0000-memory.dmp
memory/1028-87-0x0000026543E40000-0x00000265440B0000-memory.dmp
memory/1028-88-0x00000265440B0000-0x00000265440C0000-memory.dmp
memory/1028-97-0x00000265441D0000-0x00000265441E0000-memory.dmp
memory/1028-96-0x00000265441C0000-0x00000265441D0000-memory.dmp
memory/1028-95-0x0000026544180000-0x0000026544190000-memory.dmp
memory/1028-94-0x0000026544170000-0x0000026544180000-memory.dmp
memory/1028-93-0x0000026544160000-0x0000026544170000-memory.dmp
memory/1028-92-0x0000026544150000-0x0000026544160000-memory.dmp
memory/1028-91-0x0000026544140000-0x0000026544150000-memory.dmp
memory/1028-90-0x0000026544120000-0x0000026544130000-memory.dmp
memory/1028-89-0x00000265440C0000-0x00000265440D0000-memory.dmp