b80e7e6d6298436602160675a5b08cd4efaf75aedb4736f46ad0beebefd76132

Resubmissions

06/07/2026, 01:26

06/07/2026, 01:13

06/07/2026, 00:57

max time kernel
898s
max time network
678s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
06/07/2026, 00:57

Target
papayaanalyticstorch.jar
Size 52KB
Sample260706-bbfdcscw9p
SHA256 b80e7e6d6298436602160675a5b08cd4efaf75aedb4736f46ad0beebefd76132
MD5 e8b6cbf9d368c30d91b4834126d29c4a
SHA1 385839b3517ef77bb8b4496e249e5bd2610afc3d
SHA512 c71925aaf0f460b46a906adad812659f8bae26db2dc45aea4009ec101fe08a2aed77b67231c4b8dc8e202ec58da9594754237a2045ee814e9bb01a5123f3a76b
SSDEEP 1536:ccqRDDEY93NQyHj4wz2wHCoIW8O2PKE2Wl:cLRvE/yDjawHmh
TLSH
T135336BC1A6F14C9AF9B5B23F9D66F724331183740A428F9BC2C813985D966F227531DA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 4 IoCs

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 2676 wrote to memory of 1808	2676	cmd.exe	90

C:\Windows\system32\cmd.exe
cmd /c mkdir "%TEMP%\ext" & "C:\Program Files\7-Zip\7z.exe" x C:\Users\Admin\AppData\Local\Temp\papayaanalyticstorch.jar -o"%TEMP%\ext" -y & for /r "%TEMP%\ext" %f in (*.exe *.bat *.vbs *.cmd *.ps1 *.doc *.docx *.xls *.xlsx *.pdf *.jpg *.png) do start "" "%f"
1⤵
- Suspicious use of WriteProcessMemory
PID:2676
- C:\Program Files\7-Zip\7z.exe
  "C:\Program Files\7-Zip\7z.exe" x C:\Users\Admin\AppData\Local\Temp\papayaanalyticstorch.jar -o"C:\Users\Admin\AppData\Local\Temp\ext" -y
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:1808