Analysis
- max time kernel
148s - max time network
149s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
23/07/2026, 12:27
General
- Target Dota2SkinChanger.exe
- Size 5.0MB
- Sample260723-pm36fsba36
- SHA256 dceba15bdaf8f229b0d2e1a35f462cf20961efebc98bc1e96ab612b8112e2a1b
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious use of SetWindowsHookEx 2 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Dota2SkinChanger.exe"C:\Users\Admin\AppData\Local\Temp\Dota2SkinChanger.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Java\jre-1.8\bin\javaw.exe"C:\Program Files\Java\jre-1.8\bin\javaw.exe" -Dfile.encoding=UTF-8 -classpath "C:\Users\Admin\AppData\Local\Temp\Dota2SkinChanger.exe" org.develnext.jphp.ext.javafx.FXLauncher2⤵
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1172-3-0x0000013600000000-0x0000013600270000-memory.dmp
memory/1172-12-0x0000013673B50000-0x0000013673B51000-memory.dmp
memory/1172-15-0x0000013600270000-0x0000013600280000-memory.dmp
memory/1172-17-0x0000013600280000-0x0000013600290000-memory.dmp
memory/1172-20-0x0000013600290000-0x00000136002A0000-memory.dmp
memory/1172-23-0x00000136002A0000-0x00000136002B0000-memory.dmp
memory/1172-28-0x00000136002B0000-0x00000136002C0000-memory.dmp
memory/1172-30-0x00000136002C0000-0x00000136002D0000-memory.dmp
memory/1172-33-0x00000136002D0000-0x00000136002E0000-memory.dmp
memory/1172-36-0x00000136002E0000-0x00000136002F0000-memory.dmp
memory/1172-35-0x0000013600000000-0x0000013600270000-memory.dmp
memory/1172-39-0x00000136002F0000-0x0000013600300000-memory.dmp
memory/1172-41-0x0000013600300000-0x0000013600310000-memory.dmp
memory/1172-44-0x0000013600310000-0x0000013600320000-memory.dmp
memory/1172-43-0x0000013600270000-0x0000013600280000-memory.dmp
memory/1172-46-0x0000013600280000-0x0000013600290000-memory.dmp
memory/1172-47-0x0000013600320000-0x0000013600330000-memory.dmp
memory/1172-50-0x0000013600330000-0x0000013600340000-memory.dmp
memory/1172-49-0x0000013600290000-0x00000136002A0000-memory.dmp
memory/1172-52-0x00000136002A0000-0x00000136002B0000-memory.dmp
memory/1172-53-0x0000013600340000-0x0000013600350000-memory.dmp
memory/1172-57-0x0000013600350000-0x0000013600360000-memory.dmp
memory/1172-56-0x00000136002B0000-0x00000136002C0000-memory.dmp
memory/1172-59-0x0000013600360000-0x0000013600370000-memory.dmp
memory/1172-58-0x00000136002C0000-0x00000136002D0000-memory.dmp
memory/1172-62-0x0000013600370000-0x0000013600380000-memory.dmp
memory/1172-61-0x00000136002D0000-0x00000136002E0000-memory.dmp
memory/1172-65-0x0000013600380000-0x0000013600390000-memory.dmp
memory/1172-64-0x00000136002E0000-0x00000136002F0000-memory.dmp
memory/1172-68-0x00000136002F0000-0x0000013600300000-memory.dmp
memory/1172-69-0x0000013600390000-0x00000136003A0000-memory.dmp
memory/1172-72-0x0000013600300000-0x0000013600310000-memory.dmp
memory/1172-73-0x00000136003A0000-0x00000136003B0000-memory.dmp
memory/1172-78-0x0000013600310000-0x0000013600320000-memory.dmp
memory/1172-79-0x00000136003B0000-0x00000136003C0000-memory.dmp
memory/1172-81-0x0000013600320000-0x0000013600330000-memory.dmp
memory/1172-82-0x00000136003C0000-0x00000136003D0000-memory.dmp
memory/1172-84-0x0000013673B50000-0x0000013673B51000-memory.dmp
memory/1172-89-0x00000136003D0000-0x00000136003E0000-memory.dmp
memory/1172-88-0x0000013600330000-0x0000013600340000-memory.dmp
memory/1172-91-0x00000136003E0000-0x00000136003F0000-memory.dmp
memory/1172-90-0x0000013600340000-0x0000013600350000-memory.dmp
memory/1172-93-0x0000013600350000-0x0000013600360000-memory.dmp
memory/1172-94-0x00000136003F0000-0x0000013600400000-memory.dmp
memory/1172-96-0x0000013600360000-0x0000013600370000-memory.dmp
memory/1172-97-0x0000013600400000-0x0000013600410000-memory.dmp
memory/1172-100-0x0000013600410000-0x0000013600420000-memory.dmp
memory/1172-99-0x0000013600370000-0x0000013600380000-memory.dmp
memory/1172-104-0x0000013600420000-0x0000013600430000-memory.dmp
memory/1172-103-0x0000013600380000-0x0000013600390000-memory.dmp
memory/1172-106-0x0000013600390000-0x00000136003A0000-memory.dmp
memory/1172-107-0x0000013600430000-0x0000013600440000-memory.dmp
memory/1172-111-0x0000013673B50000-0x0000013673B51000-memory.dmp
memory/1172-114-0x0000013600440000-0x0000013600450000-memory.dmp
memory/1172-113-0x00000136003A0000-0x00000136003B0000-memory.dmp
memory/1172-117-0x0000013600450000-0x0000013600460000-memory.dmp
memory/1172-116-0x00000136003B0000-0x00000136003C0000-memory.dmp
memory/1172-120-0x0000013600460000-0x0000013600470000-memory.dmp
memory/1172-119-0x00000136003C0000-0x00000136003D0000-memory.dmp
memory/1172-122-0x00000136003D0000-0x00000136003E0000-memory.dmp
memory/1172-123-0x0000013600470000-0x0000013600480000-memory.dmp
memory/1172-127-0x00000136003E0000-0x00000136003F0000-memory.dmp
memory/1172-128-0x0000013600480000-0x0000013600490000-memory.dmp
memory/1172-130-0x00000136003F0000-0x0000013600400000-memory.dmp
memory/1172-131-0x0000013600490000-0x00000136004A0000-memory.dmp
memory/1172-133-0x0000013600400000-0x0000013600410000-memory.dmp
memory/1172-134-0x00000136004A0000-0x00000136004B0000-memory.dmp
memory/1172-137-0x00000136004B0000-0x00000136004C0000-memory.dmp
memory/1172-136-0x0000013600410000-0x0000013600420000-memory.dmp
memory/1172-140-0x00000136004C0000-0x00000136004D0000-memory.dmp
memory/1172-139-0x0000013600420000-0x0000013600430000-memory.dmp
memory/1172-142-0x0000013600430000-0x0000013600440000-memory.dmp
memory/1172-143-0x00000136004D0000-0x00000136004E0000-memory.dmp
memory/1172-146-0x00000136004E0000-0x00000136004F0000-memory.dmp
memory/1172-145-0x0000013600440000-0x0000013600450000-memory.dmp
memory/1172-149-0x00000136004F0000-0x0000013600500000-memory.dmp
memory/1172-148-0x0000013600450000-0x0000013600460000-memory.dmp
memory/1172-152-0x0000013600500000-0x0000013600510000-memory.dmp
memory/1172-151-0x0000013600460000-0x0000013600470000-memory.dmp
memory/1172-154-0x0000013600470000-0x0000013600480000-memory.dmp
memory/1172-155-0x0000013600510000-0x0000013600520000-memory.dmp
memory/1172-158-0x0000013673B50000-0x0000013673B51000-memory.dmp
memory/1172-161-0x0000013600520000-0x0000013600530000-memory.dmp
memory/1172-160-0x0000013600480000-0x0000013600490000-memory.dmp
memory/1172-163-0x0000013600490000-0x00000136004A0000-memory.dmp
memory/1172-164-0x0000013600530000-0x0000013600540000-memory.dmp
memory/1172-168-0x0000013600540000-0x0000013600550000-memory.dmp
memory/1172-167-0x00000136004A0000-0x00000136004B0000-memory.dmp
memory/1172-170-0x0000013600550000-0x0000013600560000-memory.dmp
memory/1172-169-0x00000136004B0000-0x00000136004C0000-memory.dmp
memory/1172-172-0x00000136004C0000-0x00000136004D0000-memory.dmp
memory/1172-173-0x0000013600560000-0x0000013600570000-memory.dmp
memory/1172-176-0x0000013600570000-0x0000013600580000-memory.dmp
memory/1172-175-0x00000136004D0000-0x00000136004E0000-memory.dmp
memory/1172-179-0x00000136004E0000-0x00000136004F0000-memory.dmp
memory/1172-182-0x00000136004F0000-0x0000013600500000-memory.dmp
memory/1172-181-0x0000013600590000-0x00000136005A0000-memory.dmp
memory/1172-180-0x0000013600580000-0x0000013600590000-memory.dmp
memory/1172-184-0x0000013600500000-0x0000013600510000-memory.dmp
memory/1172-185-0x00000136005A0000-0x00000136005B0000-memory.dmp
memory/1172-244-0x0000013673B50000-0x0000013673B51000-memory.dmp
memory/1172-251-0x0000013673B50000-0x0000013673B51000-memory.dmp
memory/1756-0-0x0000000000400000-0x0000000000419000-memory.dmp