Analysis
- user interaction
yes - max time kernel
131s - max time network
111s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
18/07/2026, 12:13
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
er1ikhanmod_obfuscated.jar
Resource
win11-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
f9f94e42f8hm9t89l53k8uyk.exe
Resource
win11-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
fabric-rendering-indigo-v2.jar
Resource
win11-20260513-en
0 signatures
150 seconds
General
- Target er1ikhanmod_obfuscated.jar
- Size 3.0MB
- Sample260718-pdvsqaes7s
- SHA256 5a392f44e71908f36d3457e4b5ec9737c430e6fde2ce5b15c14b39fda0b774ad
- MD5 e8a80b55ddc3dc4686b1790b10dc9945
- SHA1 279437d1e8025d2be3a29fe90685ea37c19a3f2a
- SHA512 045f03bcb1f71afa35409ab6c21cfc644ab695d240786302567630bf9fb22b95ca93d6e4f07be8ebbd9ee068a0553bedc83dc4979f2ecc2e0d164d066c64321f
- SSDEEP 49152:0DncROlIUipVzMjmhL7+JUFgrvMhbqpBuB/i1aBCV0ciglipp1nklfJA/+3SZ+VV:gcgripmjm57MUAUhbqiBq1aBCVXigspo
- TLSH T186E5337B3346E16AF0016BBB5C86E4D5E3DE9B3BD235670433917349992A6720363CB8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe 2532 java.exe - Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe Token: SeDebugPrivilege 2532 java.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2532 java.exe 2532 java.exe