Analysis
- user interaction
yes - max time kernel
26s - max time network
28s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260618-en - resource tags
- submitted
29/06/2026, 12:52
General
- Target wem3wp0uou.jar
- Size 3.0MB
- Sample260629-p4dxwsdy51
- SHA256 be163c0eb7e78deae5a97766519e1b26ff92d6dda9afb63b68817141bd27c5c6
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 22 IoCs
- Suspicious use of AdjustPrivilegeToken 64 IoCs
- Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -jar C:\Users\Admin\AppData\Local\Temp\wem3wp0uou.jar1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/808-2-0x000002459A2E0000-0x000002459A550000-memory.dmp
memory/808-11-0x00000245994D0000-0x00000245994D1000-memory.dmp
memory/808-19-0x00000245994D0000-0x00000245994D1000-memory.dmp
memory/808-24-0x000002459A550000-0x000002459A560000-memory.dmp
memory/808-26-0x000002459A560000-0x000002459A570000-memory.dmp
memory/808-28-0x000002459A570000-0x000002459A580000-memory.dmp
memory/808-31-0x000002459A580000-0x000002459A590000-memory.dmp
memory/808-33-0x000002459A590000-0x000002459A5A0000-memory.dmp
memory/808-36-0x000002459A5A0000-0x000002459A5B0000-memory.dmp
memory/808-37-0x000002459A5B0000-0x000002459A5C0000-memory.dmp
memory/808-41-0x000002459A2E0000-0x000002459A550000-memory.dmp
memory/808-53-0x000002459A610000-0x000002459A620000-memory.dmp
memory/808-45-0x000002459A5E0000-0x000002459A5F0000-memory.dmp
memory/808-54-0x000002459A550000-0x000002459A560000-memory.dmp
memory/808-52-0x000002459A600000-0x000002459A610000-memory.dmp
memory/808-57-0x00000245994D0000-0x00000245994D1000-memory.dmp
memory/808-56-0x000002459A620000-0x000002459A630000-memory.dmp
memory/808-55-0x000002459A560000-0x000002459A570000-memory.dmp
memory/808-51-0x000002459A5F0000-0x000002459A600000-memory.dmp
memory/808-43-0x000002459A5D0000-0x000002459A5E0000-memory.dmp
memory/808-42-0x000002459A5C0000-0x000002459A5D0000-memory.dmp
memory/808-61-0x000002459A630000-0x000002459A640000-memory.dmp
memory/808-60-0x000002459A570000-0x000002459A580000-memory.dmp
memory/808-63-0x000002459A580000-0x000002459A590000-memory.dmp
memory/808-64-0x000002459A640000-0x000002459A650000-memory.dmp
memory/808-68-0x000002459A590000-0x000002459A5A0000-memory.dmp
memory/808-69-0x000002459A650000-0x000002459A660000-memory.dmp
memory/808-78-0x000002459A5A0000-0x000002459A5B0000-memory.dmp
memory/808-90-0x000002459A5D0000-0x000002459A5E0000-memory.dmp
memory/808-89-0x000002459A5C0000-0x000002459A5D0000-memory.dmp
memory/808-88-0x000002459A6A0000-0x000002459A6B0000-memory.dmp
memory/808-86-0x000002459A680000-0x000002459A690000-memory.dmp
memory/808-80-0x000002459A660000-0x000002459A670000-memory.dmp
memory/808-87-0x000002459A690000-0x000002459A6A0000-memory.dmp
memory/808-96-0x000002459A6D0000-0x000002459A6E0000-memory.dmp
memory/808-99-0x000002459A610000-0x000002459A620000-memory.dmp
memory/808-101-0x00000245B36F0000-0x00000245B36F1000-memory.dmp
memory/808-98-0x000002459A600000-0x000002459A610000-memory.dmp
memory/808-97-0x000002459A5F0000-0x000002459A600000-memory.dmp
memory/808-95-0x000002459A6C0000-0x000002459A6D0000-memory.dmp
memory/808-94-0x000002459A6B0000-0x000002459A6C0000-memory.dmp
memory/808-93-0x000002459A5E0000-0x000002459A5F0000-memory.dmp
memory/808-85-0x000002459A670000-0x000002459A680000-memory.dmp
memory/808-79-0x000002459A5B0000-0x000002459A5C0000-memory.dmp
memory/808-113-0x000002459A620000-0x000002459A630000-memory.dmp
memory/808-112-0x000002459A6F0000-0x000002459A700000-memory.dmp
memory/808-111-0x000002459A6E0000-0x000002459A6F0000-memory.dmp
memory/808-114-0x000002459A630000-0x000002459A640000-memory.dmp
memory/808-115-0x000002459A700000-0x000002459A710000-memory.dmp
memory/808-116-0x00000245994D0000-0x00000245994D1000-memory.dmp
memory/808-118-0x000002459A640000-0x000002459A650000-memory.dmp
memory/808-119-0x000002459A650000-0x000002459A660000-memory.dmp
memory/808-122-0x000002459A710000-0x000002459A720000-memory.dmp
memory/808-121-0x000002459A660000-0x000002459A670000-memory.dmp
memory/808-123-0x000002459A680000-0x000002459A690000-memory.dmp
memory/808-124-0x000002459A690000-0x000002459A6A0000-memory.dmp
memory/808-125-0x000002459A6A0000-0x000002459A6B0000-memory.dmp
memory/808-126-0x00000245994D0000-0x00000245994D1000-memory.dmp
memory/808-127-0x000002459A6B0000-0x000002459A6C0000-memory.dmp
memory/808-128-0x000002459A6C0000-0x000002459A6D0000-memory.dmp
memory/808-129-0x000002459A6D0000-0x000002459A6E0000-memory.dmp
memory/808-131-0x000002459A720000-0x000002459A730000-memory.dmp
memory/808-133-0x000002459A6E0000-0x000002459A6F0000-memory.dmp
memory/808-134-0x000002459A6F0000-0x000002459A700000-memory.dmp
memory/808-135-0x000002459A730000-0x000002459A740000-memory.dmp
memory/808-137-0x000002459A740000-0x000002459A750000-memory.dmp
memory/808-142-0x000002459A750000-0x000002459A760000-memory.dmp
memory/808-141-0x000002459A700000-0x000002459A710000-memory.dmp
memory/808-140-0x00000245B4690000-0x00000245B480E000-memory.dmp
memory/808-144-0x000002459A760000-0x000002459A770000-memory.dmp
memory/808-146-0x000002459A770000-0x000002459A780000-memory.dmp
memory/808-148-0x000002459A710000-0x000002459A720000-memory.dmp
memory/808-149-0x000002459A780000-0x000002459A790000-memory.dmp
memory/808-152-0x000002459A790000-0x000002459A7A0000-memory.dmp
memory/808-154-0x000002459A7A0000-0x000002459A7B0000-memory.dmp
memory/808-162-0x000002459A730000-0x000002459A740000-memory.dmp
memory/808-161-0x000002459A7C0000-0x000002459A7D0000-memory.dmp
memory/808-159-0x000002459A720000-0x000002459A730000-memory.dmp
memory/808-167-0x000002459A750000-0x000002459A760000-memory.dmp
memory/808-166-0x000002459A7E0000-0x000002459A7F0000-memory.dmp
memory/808-165-0x000002459A7D0000-0x000002459A7E0000-memory.dmp
memory/808-164-0x000002459A740000-0x000002459A750000-memory.dmp
memory/808-160-0x000002459A7B0000-0x000002459A7C0000-memory.dmp
memory/808-169-0x000002459A760000-0x000002459A770000-memory.dmp
memory/808-170-0x000002459A7F0000-0x000002459A800000-memory.dmp
memory/808-174-0x000002459A800000-0x000002459A810000-memory.dmp
memory/808-176-0x000002459A780000-0x000002459A790000-memory.dmp
memory/808-175-0x000002459A810000-0x000002459A820000-memory.dmp
memory/808-173-0x000002459A770000-0x000002459A780000-memory.dmp
memory/808-179-0x000002459A820000-0x000002459A830000-memory.dmp
memory/808-178-0x000002459A790000-0x000002459A7A0000-memory.dmp
memory/808-180-0x00000245994D0000-0x00000245994D1000-memory.dmp
memory/808-182-0x000002459A7A0000-0x000002459A7B0000-memory.dmp
memory/808-184-0x000002459A830000-0x000002459A840000-memory.dmp
memory/808-186-0x000002459A7B0000-0x000002459A7C0000-memory.dmp
memory/808-188-0x000002459A840000-0x000002459A850000-memory.dmp
memory/808-187-0x000002459A7C0000-0x000002459A7D0000-memory.dmp
memory/808-190-0x000002459A850000-0x000002459A860000-memory.dmp
memory/808-193-0x000002459A7D0000-0x000002459A7E0000-memory.dmp
memory/808-195-0x000002459A860000-0x000002459A870000-memory.dmp
memory/808-194-0x000002459A7E0000-0x000002459A7F0000-memory.dmp
memory/808-197-0x000002459A870000-0x000002459A880000-memory.dmp
memory/808-201-0x000002459A7F0000-0x000002459A800000-memory.dmp
memory/808-202-0x000002459A890000-0x000002459A8A0000-memory.dmp
memory/808-210-0x00000245B4690000-0x00000245B480E000-memory.dmp