Analysis
- user interaction
yes - max time kernel
149s - max time network
147s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
26/06/2026, 13:54
General
- Target ArvionClient.jar
- Size 12B
- Sample260626-q7xpvaby6s
- SHA256 e61180e0dd8abee776b5b8d83bd0023c1855bd97ff945f080c8a9ff3b3b0bc2a
Score
1/10
Malware Config
Signatures
- Checks SCSI registry key(s) 3 TTPs 3 IoCs
SCSI information is often read in order to detect sandboxing environments.
- Suspicious behavior: EnumeratesProcesses 8 IoCs
- Suspicious use of AdjustPrivilegeToken 3 IoCs
- Suspicious use of FindShellTrayWindow 19 IoCs
- Suspicious use of SendNotifyMessage 19 IoCs
Processes
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -jar C:\Users\Admin\AppData\Local\Temp\ArvionClient.jar1⤵
-
C:\Windows\system32\taskmgr.exe"C:\Windows\system32\taskmgr.exe" /41⤵
- Checks SCSI registry key(s)
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3416-0-0x0000011968360000-0x0000011968361000-memory.dmp
memory/3416-2-0x0000011968360000-0x0000011968361000-memory.dmp
memory/3416-1-0x0000011968360000-0x0000011968361000-memory.dmp
memory/3416-12-0x0000011968360000-0x0000011968361000-memory.dmp
memory/3416-11-0x0000011968360000-0x0000011968361000-memory.dmp
memory/3416-10-0x0000011968360000-0x0000011968361000-memory.dmp
memory/3416-9-0x0000011968360000-0x0000011968361000-memory.dmp
memory/3416-8-0x0000011968360000-0x0000011968361000-memory.dmp
memory/3416-7-0x0000011968360000-0x0000011968361000-memory.dmp
memory/3416-6-0x0000011968360000-0x0000011968361000-memory.dmp