Analysis
- max time kernel
148s - max time network
123s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260629-en - resource tags
- submitted
03/07/2026, 17:14
General
- Target JagexLauncherInstaller.jar
- Size 3.8MB
- Sample260703-vsc44sc13s
- SHA256 29a509896240efc8a9a324c880bd8c722ebbdafac6551204c0c98040273adff1
Malware Config
Signatures
- Drops startup file 2 IoCs
- Executes dropped EXE 1 IoCs
- Checks whether UAC is enabled 1 TTPs 1 IoCs
- Looks up external IP address via web service 4 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of SetWindowsHookEx 4 IoCs
- Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -jar C:\Users\Admin\AppData\Local\Temp\JagexLauncherInstaller.jar1⤵
- Drops startup file
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c ""C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Spoon2.bat""2⤵
- Suspicious use of WriteProcessMemory
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaw.exejavaw -jar "C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Spoon2.jar"3⤵
- Suspicious use of SetWindowsHookEx
-
-
-
C:\Users\Admin\AppData\Local\RuneLite\JagexLauncherInstaller.exeC:\Users\Admin\AppData\Local\RuneLite\JagexLauncherInstaller.exe2⤵
- Executes dropped EXE
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
3903daac9bc4a3b7.timestamp
JagexLauncherInstaller.exe
83aa4cc77f591dfc2374580bbd95f6ba_22a81a7e-d2a3-49db-bae3-8b903a517f61
Spoon2.bat
memory/4672-169-0x00000219D1510000-0x00000219D1520000-memory.dmp
memory/4672-108-0x00000219D1480000-0x00000219D1490000-memory.dmp
memory/4672-393-0x00000219CFBD0000-0x00000219CFBD1000-memory.dmp
memory/4672-272-0x00000219CFBD0000-0x00000219CFBD1000-memory.dmp
memory/4672-188-0x00000219D1570000-0x00000219D1580000-memory.dmp
memory/4672-189-0x00000219D1610000-0x00000219D1620000-memory.dmp
memory/4672-183-0x00000219D1550000-0x00000219D1560000-memory.dmp
memory/4672-184-0x00000219D15F0000-0x00000219D1600000-memory.dmp
memory/4672-186-0x00000219D1560000-0x00000219D1570000-memory.dmp
memory/4672-185-0x00000219D1600000-0x00000219D1610000-memory.dmp
memory/4672-180-0x00000219D15E0000-0x00000219D15F0000-memory.dmp
memory/4672-179-0x00000219D1540000-0x00000219D1550000-memory.dmp
memory/4672-176-0x00000219D1530000-0x00000219D1540000-memory.dmp
memory/4672-177-0x00000219D15D0000-0x00000219D15E0000-memory.dmp
memory/4672-173-0x00000219D1520000-0x00000219D1530000-memory.dmp
memory/4672-174-0x00000219D15C0000-0x00000219D15D0000-memory.dmp
memory/4672-170-0x00000219D15B0000-0x00000219D15C0000-memory.dmp
memory/4672-165-0x00000219CFBD0000-0x00000219CFBD1000-memory.dmp
memory/4672-164-0x00000219D15A0000-0x00000219D15B0000-memory.dmp
memory/4672-163-0x00000219D1500000-0x00000219D1510000-memory.dmp
memory/4672-58-0x00000219D1210000-0x00000219D1480000-memory.dmp
memory/4672-160-0x00000219D1590000-0x00000219D15A0000-memory.dmp
memory/4672-159-0x00000219D14F0000-0x00000219D1500000-memory.dmp
memory/4672-148-0x00000219D14B0000-0x00000219D14C0000-memory.dmp
memory/4672-149-0x00000219D1560000-0x00000219D1570000-memory.dmp
memory/4672-153-0x00000219D14D0000-0x00000219D14E0000-memory.dmp
memory/4672-152-0x00000219D14C0000-0x00000219D14D0000-memory.dmp
memory/4672-155-0x00000219D1570000-0x00000219D1580000-memory.dmp
memory/4672-156-0x00000219D1580000-0x00000219D1590000-memory.dmp
memory/4672-154-0x00000219D14E0000-0x00000219D14F0000-memory.dmp
memory/4672-145-0x00000219D14A0000-0x00000219D14B0000-memory.dmp
memory/4672-146-0x00000219D1550000-0x00000219D1560000-memory.dmp
memory/4672-142-0x00000219D1490000-0x00000219D14A0000-memory.dmp
memory/4672-143-0x00000219D1540000-0x00000219D1550000-memory.dmp
memory/4672-139-0x00000219D1480000-0x00000219D1490000-memory.dmp
memory/4672-140-0x00000219D1530000-0x00000219D1540000-memory.dmp
memory/4672-137-0x00000219D1520000-0x00000219D1530000-memory.dmp
memory/4672-134-0x00000219D1510000-0x00000219D1520000-memory.dmp
memory/4672-132-0x00000219D1500000-0x00000219D1510000-memory.dmp
memory/4672-122-0x00000219D14D0000-0x00000219D14E0000-memory.dmp
memory/4672-123-0x00000219D14E0000-0x00000219D14F0000-memory.dmp
memory/4672-121-0x00000219D14C0000-0x00000219D14D0000-memory.dmp
memory/4672-127-0x00000219D14F0000-0x00000219D1500000-memory.dmp
memory/4672-116-0x00000219D14B0000-0x00000219D14C0000-memory.dmp
memory/4672-113-0x00000219D14A0000-0x00000219D14B0000-memory.dmp
memory/4672-105-0x00000219CFBD0000-0x00000219CFBD1000-memory.dmp
memory/4672-111-0x00000219D1490000-0x00000219D14A0000-memory.dmp
memory/4672-109-0x00000219D1210000-0x00000219D1480000-memory.dmp
memory/5620-81-0x00000213CC9F0000-0x00000213CCA00000-memory.dmp
memory/5620-53-0x00000213CCA70000-0x00000213CCA80000-memory.dmp
memory/5620-112-0x00000213CCA80000-0x00000213CCA90000-memory.dmp
memory/5620-97-0x00000213CCA40000-0x00000213CCA50000-memory.dmp
memory/5620-115-0x00000213CCA90000-0x00000213CCAA0000-memory.dmp
memory/5620-98-0x00000213CCA50000-0x00000213CCA60000-memory.dmp
memory/5620-99-0x00000213CCA60000-0x00000213CCA70000-memory.dmp
memory/5620-124-0x00000213CCAB0000-0x00000213CCAC0000-memory.dmp
memory/5620-101-0x00000213CCAF0000-0x00000213CCB00000-memory.dmp
memory/5620-100-0x00000213CCA70000-0x00000213CCA80000-memory.dmp
memory/5620-126-0x00000213CCAC0000-0x00000213CCAD0000-memory.dmp
memory/5620-49-0x00000213CC9A0000-0x00000213CC9B0000-memory.dmp
memory/5620-35-0x00000213CCA00000-0x00000213CCA10000-memory.dmp
memory/5620-91-0x00000213CCA20000-0x00000213CCA30000-memory.dmp
memory/5620-130-0x00000213CCAD0000-0x00000213CCAE0000-memory.dmp
memory/5620-92-0x00000213CCAD0000-0x00000213CCAE0000-memory.dmp
memory/5620-93-0x00000213CCAE0000-0x00000213CCAF0000-memory.dmp
memory/5620-136-0x00000213CCAF0000-0x00000213CCB00000-memory.dmp
memory/5620-94-0x00000213CCA30000-0x00000213CCA40000-memory.dmp
memory/5620-87-0x00000213CCA10000-0x00000213CCA20000-memory.dmp
memory/5620-88-0x00000213CCAC0000-0x00000213CCAD0000-memory.dmp
memory/5620-84-0x00000213CCA00000-0x00000213CCA10000-memory.dmp
memory/5620-85-0x00000213CCAB0000-0x00000213CCAC0000-memory.dmp
memory/5620-19-0x00000213CC9A0000-0x00000213CC9B0000-memory.dmp
memory/5620-82-0x00000213CCAA0000-0x00000213CCAB0000-memory.dmp
memory/5620-77-0x00000213CC9E0000-0x00000213CC9F0000-memory.dmp
memory/5620-13-0x00000213CC970000-0x00000213CC980000-memory.dmp
memory/5620-78-0x00000213CCA90000-0x00000213CCAA0000-memory.dmp
memory/5620-72-0x00000213CC9D0000-0x00000213CC9E0000-memory.dmp
memory/5620-73-0x00000213CCA80000-0x00000213CCA90000-memory.dmp
memory/5620-15-0x00000213CC980000-0x00000213CC990000-memory.dmp
memory/5620-50-0x00000213CCA40000-0x00000213CCA50000-memory.dmp
memory/5620-54-0x00000213CC9B0000-0x00000213CC9C0000-memory.dmp
memory/5620-51-0x00000213CCA50000-0x00000213CCA60000-memory.dmp
memory/5620-52-0x00000213CCA60000-0x00000213CCA70000-memory.dmp
memory/5620-103-0x00000213CC660000-0x00000213CC661000-memory.dmp
memory/5620-55-0x00000213CC9C0000-0x00000213CC9D0000-memory.dmp
memory/5620-120-0x00000213CCAA0000-0x00000213CCAB0000-memory.dmp
memory/5620-2-0x00000213CC700000-0x00000213CC970000-memory.dmp
memory/5620-44-0x00000213CCA30000-0x00000213CCA40000-memory.dmp
memory/5620-43-0x00000213CC990000-0x00000213CC9A0000-memory.dmp
memory/5620-41-0x00000213CC980000-0x00000213CC990000-memory.dmp
memory/5620-42-0x00000213CCA20000-0x00000213CCA30000-memory.dmp
memory/5620-37-0x00000213CC970000-0x00000213CC980000-memory.dmp
memory/5620-38-0x00000213CCA10000-0x00000213CCA20000-memory.dmp
memory/5620-131-0x00000213CCAE0000-0x00000213CCAF0000-memory.dmp
memory/5620-17-0x00000213CC990000-0x00000213CC9A0000-memory.dmp
memory/5620-30-0x00000213CC9F0000-0x00000213CCA00000-memory.dmp
memory/5620-29-0x00000213CC700000-0x00000213CC970000-memory.dmp
memory/5620-27-0x00000213CC9E0000-0x00000213CC9F0000-memory.dmp
memory/5620-25-0x00000213CC9D0000-0x00000213CC9E0000-memory.dmp
memory/5620-208-0x00000213CC660000-0x00000213CC661000-memory.dmp
memory/5620-232-0x00000213CC660000-0x00000213CC661000-memory.dmp
memory/5620-11-0x00000213CC660000-0x00000213CC661000-memory.dmp
memory/5620-244-0x00000213CC660000-0x00000213CC661000-memory.dmp
memory/5620-249-0x00000213CC660000-0x00000213CC661000-memory.dmp
memory/5620-22-0x00000213CC9B0000-0x00000213CC9C0000-memory.dmp
memory/5620-274-0x00000213CC660000-0x00000213CC661000-memory.dmp
memory/5620-276-0x00000213CC660000-0x00000213CC661000-memory.dmp
memory/5620-23-0x00000213CC9C0000-0x00000213CC9D0000-memory.dmp
memory/5620-399-0x00000213CC660000-0x00000213CC661000-memory.dmp
memory/5620-405-0x00000213CC660000-0x00000213CC661000-memory.dmp
memory/5620-409-0x00000213CC660000-0x00000213CC661000-memory.dmp
memory/5620-411-0x00000213CC660000-0x00000213CC661000-memory.dmp
memory/5620-429-0x00000213CC660000-0x00000213CC661000-memory.dmp
memory/5620-432-0x00000213CC660000-0x00000213CC661000-memory.dmp
memory/5620-436-0x00000213CC660000-0x00000213CC661000-memory.dmp
memory/5620-440-0x00000213CC660000-0x00000213CC661000-memory.dmp
memory/5620-442-0x00000213CC660000-0x00000213CC661000-memory.dmp
memory/5620-449-0x00000213CC660000-0x00000213CC661000-memory.dmp