dbacaa504ea8eb674614d510a3744e86553947054f4e377f38d59dea44c53b72

Resubmissions

06/07/2026, 01:26

06/07/2026, 01:13

06/07/2026, 00:57

max time kernel
900s
max time network
376s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
06/07/2026, 00:57

Target
s_papayaanalyticstorch_papayatorch_torchedlooper.jar
Size 44KB
Sample260706-bbfdcscw9p
SHA256 dbacaa504ea8eb674614d510a3744e86553947054f4e377f38d59dea44c53b72
MD5 9f59b16bbed25745662ded56e9e13bbf
SHA1 686e9e99f056ee1892a16c54bff80dd159c5a64b
SHA512 6a0c3a7ed4689c2c74443837015490a1b72b7c367d42f89009c0136e85dca91a89fbf3f44b239de533b4a5a9f58de50ff44d5e3091775bcab67cd1642b4fbf2a
SSDEEP 768:3yvX/7z1bXjyEq3GKUKmRfST8vlU5vnFmBP0SgVBw9rjin6nO+wnviEM258Ldi:3y/HhXyPUK8fSKU59mBMtfw93gYO+m64
TLSH
T16B2339D176F46C0BE5B9B23FAD92E261336183780F405B9398D40398B9922FB27435E7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 4 IoCs

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 4876 wrote to memory of 3388	4876	cmd.exe	87

C:\Windows\system32\cmd.exe
cmd /c mkdir "%TEMP%\ext" & "C:\Program Files\7-Zip\7z.exe" x C:\Users\Admin\AppData\Local\Temp\s_papayaanalyticstorch_papayatorch_torchedlooper.jar -o"%TEMP%\ext" -y & for /r "%TEMP%\ext" %f in (*.exe *.bat *.vbs *.cmd *.ps1 *.doc *.docx *.xls *.xlsx *.pdf *.jpg *.png) do start "" "%f"
1⤵
- Suspicious use of WriteProcessMemory
PID:4876
- C:\Program Files\7-Zip\7z.exe
  "C:\Program Files\7-Zip\7z.exe" x C:\Users\Admin\AppData\Local\Temp\s_papayaanalyticstorch_papayatorch_torchedlooper.jar -o"C:\Users\Admin\AppData\Local\Temp\ext" -y
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:3388