Analysis
- max time kernel
149s - max time network
127s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
21/07/2026, 16:55
General
- Target forge-1.20.1-47.4.10-installer.jar
- Size 5.8MB
- Sample260721-vfc9ca1cka
- SHA256 1912760b4cb6b803d8a826de603c9076b1da71ec2765e9a1f8c1ca78f65278e3
Malware Config
Signatures
- Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -jar C:\Users\Admin\AppData\Local\Temp\forge-1.20.1-47.4.10-installer.jar1⤵
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1324-2-0x000001EDA5650000-0x000001EDA58C0000-memory.dmp
memory/1324-11-0x000001EDA55B0000-0x000001EDA55B1000-memory.dmp
memory/1324-15-0x000001EDA58C0000-0x000001EDA58D0000-memory.dmp
memory/1324-17-0x000001EDA58D0000-0x000001EDA58E0000-memory.dmp
memory/1324-19-0x000001EDA58E0000-0x000001EDA58F0000-memory.dmp
memory/1324-21-0x000001EDA58F0000-0x000001EDA5900000-memory.dmp
memory/1324-27-0x000001EDA5910000-0x000001EDA5920000-memory.dmp
memory/1324-26-0x000001EDA5900000-0x000001EDA5910000-memory.dmp
memory/1324-31-0x000001EDA5650000-0x000001EDA58C0000-memory.dmp
memory/1324-33-0x000001EDA5940000-0x000001EDA5950000-memory.dmp
memory/1324-36-0x000001EDA5950000-0x000001EDA5960000-memory.dmp
memory/1324-32-0x000001EDA5930000-0x000001EDA5940000-memory.dmp
memory/1324-29-0x000001EDA5920000-0x000001EDA5930000-memory.dmp
memory/1324-37-0x000001EDA58C0000-0x000001EDA58D0000-memory.dmp
memory/1324-38-0x000001EDA5960000-0x000001EDA5970000-memory.dmp
memory/1324-41-0x000001EDA5970000-0x000001EDA5980000-memory.dmp
memory/1324-40-0x000001EDA58D0000-0x000001EDA58E0000-memory.dmp
memory/1324-44-0x000001EDA58E0000-0x000001EDA58F0000-memory.dmp
memory/1324-45-0x000001EDA5980000-0x000001EDA5990000-memory.dmp
memory/1324-47-0x000001EDA58F0000-0x000001EDA5900000-memory.dmp
memory/1324-48-0x000001EDA5990000-0x000001EDA59A0000-memory.dmp
memory/1324-51-0x000001EDA5910000-0x000001EDA5920000-memory.dmp
memory/1324-52-0x000001EDA59A0000-0x000001EDA59B0000-memory.dmp
memory/1324-50-0x000001EDA5900000-0x000001EDA5910000-memory.dmp
memory/1324-54-0x000001EDA59B0000-0x000001EDA59C0000-memory.dmp
memory/1324-57-0x000001EDA59C0000-0x000001EDA59D0000-memory.dmp
memory/1324-56-0x000001EDA5920000-0x000001EDA5930000-memory.dmp
memory/1324-60-0x000001EDA59D0000-0x000001EDA59E0000-memory.dmp
memory/1324-59-0x000001EDA5930000-0x000001EDA5940000-memory.dmp
memory/1324-64-0x000001EDA5940000-0x000001EDA5950000-memory.dmp
memory/1324-65-0x000001EDA59E0000-0x000001EDA59F0000-memory.dmp
memory/1324-70-0x000001EDA59F0000-0x000001EDA5A00000-memory.dmp
memory/1324-69-0x000001EDA5950000-0x000001EDA5960000-memory.dmp
memory/1324-73-0x000001EDA5960000-0x000001EDA5970000-memory.dmp
memory/1324-75-0x000001EDA5A00000-0x000001EDA5A10000-memory.dmp
memory/1324-77-0x000001EDA5A10000-0x000001EDA5A20000-memory.dmp
memory/1324-76-0x000001EDA5970000-0x000001EDA5980000-memory.dmp
memory/1324-80-0x000001EDA5A20000-0x000001EDA5A30000-memory.dmp
memory/1324-79-0x000001EDA5980000-0x000001EDA5990000-memory.dmp
memory/1324-83-0x000001EDA5A30000-0x000001EDA5A40000-memory.dmp
memory/1324-82-0x000001EDA5990000-0x000001EDA59A0000-memory.dmp
memory/1324-86-0x000001EDA5A40000-0x000001EDA5A50000-memory.dmp
memory/1324-85-0x000001EDA59A0000-0x000001EDA59B0000-memory.dmp
memory/1324-89-0x000001EDA5A50000-0x000001EDA5A60000-memory.dmp
memory/1324-88-0x000001EDA59B0000-0x000001EDA59C0000-memory.dmp
memory/1324-91-0x000001EDA59C0000-0x000001EDA59D0000-memory.dmp
memory/1324-92-0x000001EDA5A60000-0x000001EDA5A70000-memory.dmp
memory/1324-96-0x000001EDA5A70000-0x000001EDA5A80000-memory.dmp
memory/1324-95-0x000001EDA59D0000-0x000001EDA59E0000-memory.dmp
memory/1324-97-0x000001EDA55B0000-0x000001EDA55B1000-memory.dmp
memory/1324-100-0x000001EDA5A80000-0x000001EDA5A90000-memory.dmp
memory/1324-99-0x000001EDA59E0000-0x000001EDA59F0000-memory.dmp
memory/1324-102-0x000001EDA55B0000-0x000001EDA55B1000-memory.dmp
memory/1324-109-0x000001EDA5A90000-0x000001EDA5AA0000-memory.dmp
memory/1324-108-0x000001EDA59F0000-0x000001EDA5A00000-memory.dmp
memory/1324-110-0x000001EDA55B0000-0x000001EDA55B1000-memory.dmp
memory/1324-112-0x000001EDA5A00000-0x000001EDA5A10000-memory.dmp
memory/1324-113-0x000001EDA5AA0000-0x000001EDA5AB0000-memory.dmp
memory/1324-116-0x000001EDA5AB0000-0x000001EDA5AC0000-memory.dmp
memory/1324-115-0x000001EDA5A10000-0x000001EDA5A20000-memory.dmp
memory/1324-119-0x000001EDA5A20000-0x000001EDA5A30000-memory.dmp
memory/1324-120-0x000001EDA5AC0000-0x000001EDA5AD0000-memory.dmp
memory/1324-123-0x000001EDA5AD0000-0x000001EDA5AE0000-memory.dmp
memory/1324-122-0x000001EDA5A30000-0x000001EDA5A40000-memory.dmp
memory/1324-128-0x000001EDA5A50000-0x000001EDA5A60000-memory.dmp
memory/1324-127-0x000001EDA5AE0000-0x000001EDA5AF0000-memory.dmp
memory/1324-129-0x000001EDA5AF0000-0x000001EDA5B00000-memory.dmp
memory/1324-126-0x000001EDA5A40000-0x000001EDA5A50000-memory.dmp
memory/1324-132-0x000001EDA5B00000-0x000001EDA5B10000-memory.dmp
memory/1324-131-0x000001EDA5A60000-0x000001EDA5A70000-memory.dmp
memory/1324-135-0x000001EDA5A70000-0x000001EDA5A80000-memory.dmp
memory/1324-136-0x000001EDA5B10000-0x000001EDA5B20000-memory.dmp
memory/1324-138-0x000001EDA5B20000-0x000001EDA5B30000-memory.dmp
memory/1324-137-0x000001EDA5A80000-0x000001EDA5A90000-memory.dmp
memory/1324-143-0x000001EDA55B0000-0x000001EDA55B1000-memory.dmp
memory/1324-141-0x000001EDA5B30000-0x000001EDA5B40000-memory.dmp
memory/1324-140-0x000001EDA5A90000-0x000001EDA5AA0000-memory.dmp
memory/1324-150-0x000001EDA5B40000-0x000001EDA5B50000-memory.dmp
memory/1324-148-0x000001EDA5AA0000-0x000001EDA5AB0000-memory.dmp
memory/1324-159-0x000001EDA5B50000-0x000001EDA5B60000-memory.dmp
memory/1324-158-0x000001EDA5AB0000-0x000001EDA5AC0000-memory.dmp
memory/1324-163-0x000001EDA5B60000-0x000001EDA5B70000-memory.dmp
memory/1324-162-0x000001EDA5AC0000-0x000001EDA5AD0000-memory.dmp
memory/1324-164-0x000001EDA55B0000-0x000001EDA55B1000-memory.dmp
memory/1324-166-0x000001EDA55B0000-0x000001EDA55B1000-memory.dmp
memory/1324-168-0x000001EDA5AD0000-0x000001EDA5AE0000-memory.dmp
memory/1324-169-0x000001EDA5B70000-0x000001EDA5B80000-memory.dmp
memory/1324-171-0x000001EDA5AE0000-0x000001EDA5AF0000-memory.dmp
memory/1324-172-0x000001EDA5B80000-0x000001EDA5B90000-memory.dmp
memory/1324-176-0x000001EDA5B90000-0x000001EDA5BA0000-memory.dmp
memory/1324-175-0x000001EDA5AF0000-0x000001EDA5B00000-memory.dmp
memory/1324-174-0x000001EDA55B0000-0x000001EDA55B1000-memory.dmp
memory/1324-178-0x000001EDA5B00000-0x000001EDA5B10000-memory.dmp
memory/1324-179-0x000001EDA5BA0000-0x000001EDA5BB0000-memory.dmp
memory/1324-187-0x000001EDA5BB0000-0x000001EDA5BC0000-memory.dmp
memory/1324-186-0x000001EDA5B10000-0x000001EDA5B20000-memory.dmp
memory/1324-198-0x000001EDA5BC0000-0x000001EDA5BD0000-memory.dmp
memory/1324-195-0x000001EDA5B20000-0x000001EDA5B30000-memory.dmp
memory/1324-210-0x000001EDA55B0000-0x000001EDA55B1000-memory.dmp
memory/1324-217-0x000001EDA55B0000-0x000001EDA55B1000-memory.dmp
memory/1324-303-0x000001EDA5BD0000-0x000001EDA5BE0000-memory.dmp
memory/1324-302-0x000001EDA5B30000-0x000001EDA5B40000-memory.dmp
memory/1324-306-0x000001EDA5BE0000-0x000001EDA5BF0000-memory.dmp
memory/1324-305-0x000001EDA5B40000-0x000001EDA5B50000-memory.dmp
memory/1324-308-0x000001EDA5B50000-0x000001EDA5B60000-memory.dmp
memory/1324-309-0x000001EDA5BF0000-0x000001EDA5C00000-memory.dmp
memory/1324-310-0x000001EDA55B0000-0x000001EDA55B1000-memory.dmp
memory/1324-317-0x000001EDA55B0000-0x000001EDA55B1000-memory.dmp
memory/1324-448-0x000001EDA55B0000-0x000001EDA55B1000-memory.dmp