Analysis
- max time kernel
149s - max time network
148s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
29/06/2026, 18:59
General
- Target bin/dumpfsdata.bat
- Size 270B
- Sample260629-xm4e8aes7n
- SHA256 ff3cf8d7135640af412d85e1e0aa36476b006a8af13de49ce9e5a1ddcb3839e7
Malware Config
Signatures
- Suspicious use of SetWindowsHookEx 4 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\bin\dumpfsdata.bat"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -cp "C:\Users\Admin\AppData\Local\Temp\bin\..\lib\hfsx.jar" org.catacombae.hfsexplorer.tools.DumpFSInfo2⤵
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2000-2-0x000001E484D00000-0x000001E484F70000-memory.dmp
memory/2000-11-0x000001E483520000-0x000001E483521000-memory.dmp
memory/2000-15-0x000001E483520000-0x000001E483521000-memory.dmp
memory/2000-19-0x000001E483520000-0x000001E483521000-memory.dmp
memory/2000-21-0x000001E484F70000-0x000001E484F80000-memory.dmp
memory/2000-23-0x000001E484F80000-0x000001E484F90000-memory.dmp
memory/2000-26-0x000001E484F90000-0x000001E484FA0000-memory.dmp
memory/2000-28-0x000001E484FA0000-0x000001E484FB0000-memory.dmp
memory/2000-31-0x000001E484FB0000-0x000001E484FC0000-memory.dmp
memory/2000-34-0x000001E484FC0000-0x000001E484FD0000-memory.dmp
memory/2000-36-0x000001E484FD0000-0x000001E484FE0000-memory.dmp
memory/2000-39-0x000001E484FE0000-0x000001E484FF0000-memory.dmp
memory/2000-41-0x000001E484D00000-0x000001E484F70000-memory.dmp
memory/2000-42-0x000001E484FF0000-0x000001E485000000-memory.dmp
memory/2000-44-0x000001E485000000-0x000001E485010000-memory.dmp
memory/2000-48-0x000001E485010000-0x000001E485020000-memory.dmp
memory/2000-47-0x000001E484F70000-0x000001E484F80000-memory.dmp
memory/2000-51-0x000001E485020000-0x000001E485030000-memory.dmp
memory/2000-50-0x000001E484F80000-0x000001E484F90000-memory.dmp
memory/2000-53-0x000001E484F90000-0x000001E484FA0000-memory.dmp
memory/2000-56-0x000001E484FA0000-0x000001E484FB0000-memory.dmp
memory/2000-57-0x000001E485030000-0x000001E485040000-memory.dmp
memory/2000-61-0x000001E485040000-0x000001E485050000-memory.dmp
memory/2000-60-0x000001E484FB0000-0x000001E484FC0000-memory.dmp
memory/2000-63-0x000001E484FC0000-0x000001E484FD0000-memory.dmp
memory/2000-64-0x000001E485050000-0x000001E485060000-memory.dmp
memory/2000-67-0x000001E484FD0000-0x000001E484FE0000-memory.dmp
memory/2000-68-0x000001E485060000-0x000001E485070000-memory.dmp
memory/2000-71-0x000001E484FE0000-0x000001E484FF0000-memory.dmp
memory/2000-72-0x000001E485070000-0x000001E485080000-memory.dmp
memory/2000-74-0x000001E484FF0000-0x000001E485000000-memory.dmp
memory/2000-75-0x000001E485080000-0x000001E485090000-memory.dmp
memory/2000-78-0x000001E485000000-0x000001E485010000-memory.dmp
memory/2000-79-0x000001E485090000-0x000001E4850A0000-memory.dmp
memory/2000-81-0x000001E485010000-0x000001E485020000-memory.dmp
memory/2000-82-0x000001E4850A0000-0x000001E4850B0000-memory.dmp
memory/2000-84-0x000001E485020000-0x000001E485030000-memory.dmp
memory/2000-87-0x000001E485030000-0x000001E485040000-memory.dmp
memory/2000-88-0x000001E4850B0000-0x000001E4850C0000-memory.dmp
memory/2000-90-0x000001E485040000-0x000001E485050000-memory.dmp
memory/2000-92-0x000001E485050000-0x000001E485060000-memory.dmp
memory/2000-93-0x000001E485060000-0x000001E485070000-memory.dmp
memory/2000-94-0x000001E4850C0000-0x000001E4850D0000-memory.dmp
memory/2000-96-0x000001E485070000-0x000001E485080000-memory.dmp
memory/2000-97-0x000001E4850D0000-0x000001E4850E0000-memory.dmp
memory/2000-100-0x000001E485080000-0x000001E485090000-memory.dmp
memory/2000-101-0x000001E4850E0000-0x000001E4850F0000-memory.dmp
memory/2000-104-0x000001E4850F0000-0x000001E485100000-memory.dmp
memory/2000-103-0x000001E485090000-0x000001E4850A0000-memory.dmp
memory/2000-106-0x000001E4850A0000-0x000001E4850B0000-memory.dmp
memory/2000-108-0x000001E4850B0000-0x000001E4850C0000-memory.dmp
memory/2000-110-0x000001E485100000-0x000001E485110000-memory.dmp
memory/2000-113-0x000001E4850C0000-0x000001E4850D0000-memory.dmp
memory/2000-114-0x000001E485110000-0x000001E485120000-memory.dmp
memory/2000-116-0x000001E4850D0000-0x000001E4850E0000-memory.dmp
memory/2000-117-0x000001E4850E0000-0x000001E4850F0000-memory.dmp
memory/2000-119-0x000001E4850F0000-0x000001E485100000-memory.dmp
memory/2000-123-0x000001E485100000-0x000001E485110000-memory.dmp
memory/2000-124-0x000001E485110000-0x000001E485120000-memory.dmp
memory/2000-133-0x000001E485120000-0x000001E485130000-memory.dmp
memory/2000-136-0x000001E483520000-0x000001E483521000-memory.dmp
memory/2000-139-0x000001E485120000-0x000001E485130000-memory.dmp
memory/2000-144-0x000001E485130000-0x000001E485140000-memory.dmp
memory/2000-147-0x000001E485130000-0x000001E485140000-memory.dmp
memory/2000-153-0x000001E485150000-0x000001E485160000-memory.dmp
memory/2000-152-0x000001E485140000-0x000001E485150000-memory.dmp
memory/2000-155-0x000001E485160000-0x000001E485170000-memory.dmp
memory/2000-158-0x000001E485150000-0x000001E485160000-memory.dmp
memory/2000-157-0x000001E485140000-0x000001E485150000-memory.dmp
memory/2000-159-0x000001E485160000-0x000001E485170000-memory.dmp
memory/2000-162-0x000001E485170000-0x000001E485180000-memory.dmp
memory/2000-166-0x000001E485180000-0x000001E485190000-memory.dmp
memory/2000-168-0x000001E485190000-0x000001E4851A0000-memory.dmp
memory/2000-170-0x000001E485170000-0x000001E485180000-memory.dmp
memory/2000-171-0x000001E485180000-0x000001E485190000-memory.dmp
memory/2000-172-0x000001E485190000-0x000001E4851A0000-memory.dmp