Analysis
- max time kernel
298s - max time network
187s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
29/06/2026, 23:34
General
- Target RefreshTokenApp/RefreshTokenApp.bat
- Size 99B
- Sample260629-3kn6eahy5x
- SHA256 8a23f32587a4ee32add02eb48e98587fbdabd210db233845d2fc7def480b2224
Malware Config
Signatures
- Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
- Suspicious use of SetWindowsHookEx 2 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\RefreshTokenApp\RefreshTokenApp.bat"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\RefreshTokenApp\runtime\bin\javaw.exe"C:\Users\Admin\AppData\Local\Temp\RefreshTokenApp\runtime\bin\javaw.exe" -jar "C:\Users\Admin\AppData\Local\Temp\RefreshTokenApp\app\refresh-token-authentication.jar"2⤵
- Checks processor information in registry
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5052-5-0x000002196A520000-0x000002196A790000-memory.dmp
memory/5052-15-0x0000021962FE0000-0x0000021963250000-memory.dmp
memory/5052-17-0x000002196AAB0000-0x000002196AD20000-memory.dmp
memory/5052-31-0x0000021963260000-0x0000021963270000-memory.dmp
memory/5052-34-0x0000021963280000-0x0000021963290000-memory.dmp
memory/5052-38-0x00000219632A0000-0x00000219632B0000-memory.dmp
memory/5052-37-0x0000021963290000-0x00000219632A0000-memory.dmp
memory/5052-32-0x0000021963270000-0x0000021963280000-memory.dmp
memory/5052-30-0x0000021963250000-0x0000021963260000-memory.dmp
memory/5052-42-0x00000219632B0000-0x00000219632C0000-memory.dmp
memory/5052-45-0x00000219632C0000-0x00000219632D0000-memory.dmp
memory/5052-47-0x000002196AAB0000-0x000002196AD20000-memory.dmp
memory/5052-46-0x0000021962FE0000-0x0000021963250000-memory.dmp
memory/5052-44-0x000002196A520000-0x000002196A790000-memory.dmp
memory/5052-60-0x0000021963310000-0x0000021963320000-memory.dmp
memory/5052-59-0x0000021963270000-0x0000021963280000-memory.dmp
memory/5052-58-0x0000021963260000-0x0000021963270000-memory.dmp
memory/5052-57-0x0000021963250000-0x0000021963260000-memory.dmp
memory/5052-55-0x0000021963300000-0x0000021963310000-memory.dmp
memory/5052-54-0x00000219632F0000-0x0000021963300000-memory.dmp
memory/5052-53-0x00000219632E0000-0x00000219632F0000-memory.dmp
memory/5052-52-0x00000219632D0000-0x00000219632E0000-memory.dmp
memory/5052-67-0x0000021963280000-0x0000021963290000-memory.dmp
memory/5052-66-0x0000021963340000-0x0000021963350000-memory.dmp
memory/5052-65-0x0000021963330000-0x0000021963340000-memory.dmp
memory/5052-64-0x0000021963320000-0x0000021963330000-memory.dmp
memory/5052-72-0x0000021963350000-0x0000021963360000-memory.dmp
memory/5052-71-0x00000219632A0000-0x00000219632B0000-memory.dmp
memory/5052-70-0x0000021963290000-0x00000219632A0000-memory.dmp
memory/5052-74-0x0000021963360000-0x0000021963370000-memory.dmp
memory/5052-84-0x00000219632C0000-0x00000219632D0000-memory.dmp
memory/5052-83-0x00000219633A0000-0x00000219633B0000-memory.dmp
memory/5052-82-0x0000021963390000-0x00000219633A0000-memory.dmp
memory/5052-81-0x0000021963380000-0x0000021963390000-memory.dmp
memory/5052-96-0x00000219632E0000-0x00000219632F0000-memory.dmp
memory/5052-106-0x0000021963430000-0x0000021963440000-memory.dmp
memory/5052-116-0x0000021963340000-0x0000021963350000-memory.dmp
memory/5052-115-0x0000021963330000-0x0000021963340000-memory.dmp
memory/5052-114-0x0000021963320000-0x0000021963330000-memory.dmp
memory/5052-113-0x0000021963460000-0x0000021963470000-memory.dmp
memory/5052-112-0x0000021963450000-0x0000021963460000-memory.dmp
memory/5052-111-0x0000021963440000-0x0000021963450000-memory.dmp
memory/5052-110-0x0000021963310000-0x0000021963320000-memory.dmp
memory/5052-105-0x0000021963420000-0x0000021963430000-memory.dmp
memory/5052-104-0x0000021963410000-0x0000021963420000-memory.dmp
memory/5052-103-0x0000021963400000-0x0000021963410000-memory.dmp
memory/5052-102-0x00000219633F0000-0x0000021963400000-memory.dmp
memory/5052-101-0x00000219633E0000-0x00000219633F0000-memory.dmp
memory/5052-100-0x00000219633D0000-0x00000219633E0000-memory.dmp
memory/5052-99-0x00000219633C0000-0x00000219633D0000-memory.dmp
memory/5052-98-0x0000021963300000-0x0000021963310000-memory.dmp
memory/5052-97-0x00000219632F0000-0x0000021963300000-memory.dmp
memory/5052-95-0x00000219632D0000-0x00000219632E0000-memory.dmp
memory/5052-86-0x00000219633B0000-0x00000219633C0000-memory.dmp
memory/5052-80-0x0000021963370000-0x0000021963380000-memory.dmp
memory/5052-79-0x00000219632B0000-0x00000219632C0000-memory.dmp
memory/5052-119-0x0000021963470000-0x0000021963480000-memory.dmp
memory/5052-122-0x0000021963480000-0x0000021963490000-memory.dmp
memory/5052-121-0x0000021963350000-0x0000021963360000-memory.dmp
memory/5052-124-0x0000021963360000-0x0000021963370000-memory.dmp
memory/5052-125-0x0000021963490000-0x00000219634A0000-memory.dmp
memory/5052-127-0x0000021963370000-0x0000021963380000-memory.dmp
memory/5052-131-0x00000219634A0000-0x00000219634B0000-memory.dmp
memory/5052-130-0x00000219633A0000-0x00000219633B0000-memory.dmp
memory/5052-129-0x0000021963390000-0x00000219633A0000-memory.dmp
memory/5052-128-0x0000021963380000-0x0000021963390000-memory.dmp
memory/5052-133-0x00000219634B0000-0x00000219634C0000-memory.dmp
memory/5052-135-0x00000219633B0000-0x00000219633C0000-memory.dmp
memory/5052-136-0x00000219634C0000-0x00000219634D0000-memory.dmp
memory/5052-137-0x00000219633C0000-0x00000219633D0000-memory.dmp
memory/5052-138-0x00000219633D0000-0x00000219633E0000-memory.dmp
memory/5052-139-0x00000219633E0000-0x00000219633F0000-memory.dmp
memory/5052-140-0x00000219633F0000-0x0000021963400000-memory.dmp
memory/5052-144-0x0000021963430000-0x0000021963440000-memory.dmp
memory/5052-143-0x0000021963420000-0x0000021963430000-memory.dmp
memory/5052-142-0x0000021963410000-0x0000021963420000-memory.dmp
memory/5052-141-0x0000021963400000-0x0000021963410000-memory.dmp
memory/5052-146-0x00000219634D0000-0x00000219634E0000-memory.dmp
memory/5052-148-0x0000021963440000-0x0000021963450000-memory.dmp
memory/5052-149-0x0000021963450000-0x0000021963460000-memory.dmp
memory/5052-151-0x00000219634E0000-0x00000219634F0000-memory.dmp
memory/5052-150-0x0000021963460000-0x0000021963470000-memory.dmp
memory/5052-153-0x00000219634F0000-0x0000021963500000-memory.dmp
memory/5052-155-0x0000021963470000-0x0000021963480000-memory.dmp
memory/5052-156-0x0000021963500000-0x0000021963510000-memory.dmp
memory/5052-157-0x0000021963480000-0x0000021963490000-memory.dmp
memory/5052-158-0x0000021963490000-0x00000219634A0000-memory.dmp
memory/5052-161-0x0000021963510000-0x0000021963520000-memory.dmp
memory/5052-160-0x00000219634A0000-0x00000219634B0000-memory.dmp
memory/5052-163-0x00000219634B0000-0x00000219634C0000-memory.dmp
memory/5052-164-0x0000021963520000-0x0000021963530000-memory.dmp
memory/5052-165-0x00000219634C0000-0x00000219634D0000-memory.dmp
memory/5052-167-0x00000219634D0000-0x00000219634E0000-memory.dmp
memory/5052-168-0x0000021963530000-0x0000021963540000-memory.dmp
memory/5052-169-0x00000219634E0000-0x00000219634F0000-memory.dmp
memory/5052-170-0x00000219634F0000-0x0000021963500000-memory.dmp