Analysis
- max time kernel
148s - max time network
142s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
23/07/2026, 12:27
General
- Target Dota2SkinChanger.exe
- Size 5.0MB
- Sample260723-pmqv5acl91
- SHA256 dceba15bdaf8f229b0d2e1a35f462cf20961efebc98bc1e96ab612b8112e2a1b
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious use of SetWindowsHookEx 2 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Dota2SkinChanger.exe"C:\Users\Admin\AppData\Local\Temp\Dota2SkinChanger.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Java\jre-1.8\bin\javaw.exe"C:\Program Files\Java\jre-1.8\bin\javaw.exe" -Dfile.encoding=UTF-8 -classpath "C:\Users\Admin\AppData\Local\Temp\Dota2SkinChanger.exe" org.develnext.jphp.ext.javafx.FXLauncher2⤵
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/924-3-0x00000278588B0000-0x0000027858B20000-memory.dmp
memory/924-12-0x0000027856F60000-0x0000027856F61000-memory.dmp
memory/924-15-0x0000027858B20000-0x0000027858B30000-memory.dmp
memory/924-17-0x0000027858B30000-0x0000027858B40000-memory.dmp
memory/924-20-0x0000027858B40000-0x0000027858B50000-memory.dmp
memory/924-24-0x0000027858B50000-0x0000027858B60000-memory.dmp
memory/924-25-0x0000027858B60000-0x0000027858B70000-memory.dmp
memory/924-30-0x0000027858B70000-0x0000027858B80000-memory.dmp
memory/924-32-0x0000027858B80000-0x0000027858B90000-memory.dmp
memory/924-35-0x0000027858B90000-0x0000027858BA0000-memory.dmp
memory/924-37-0x00000278588B0000-0x0000027858B20000-memory.dmp
memory/924-38-0x0000027858BA0000-0x0000027858BB0000-memory.dmp
memory/924-41-0x0000027858BB0000-0x0000027858BC0000-memory.dmp
memory/924-43-0x0000027858B20000-0x0000027858B30000-memory.dmp
memory/924-44-0x0000027858BC0000-0x0000027858BD0000-memory.dmp
memory/924-46-0x0000027858B30000-0x0000027858B40000-memory.dmp
memory/924-47-0x0000027858BD0000-0x0000027858BE0000-memory.dmp
memory/924-49-0x0000027858B40000-0x0000027858B50000-memory.dmp
memory/924-50-0x0000027858BE0000-0x0000027858BF0000-memory.dmp
memory/924-52-0x0000027858B50000-0x0000027858B60000-memory.dmp
memory/924-53-0x0000027858BF0000-0x0000027858C00000-memory.dmp
memory/924-56-0x0000027858C00000-0x0000027858C10000-memory.dmp
memory/924-55-0x0000027858B60000-0x0000027858B70000-memory.dmp
memory/924-59-0x0000027858C10000-0x0000027858C20000-memory.dmp
memory/924-58-0x0000027858B70000-0x0000027858B80000-memory.dmp
memory/924-61-0x0000027858B80000-0x0000027858B90000-memory.dmp
memory/924-62-0x0000027858C20000-0x0000027858C30000-memory.dmp
memory/924-64-0x0000027858B90000-0x0000027858BA0000-memory.dmp
memory/924-65-0x0000027858C30000-0x0000027858C40000-memory.dmp
memory/924-68-0x0000027858C40000-0x0000027858C50000-memory.dmp
memory/924-67-0x0000027858BA0000-0x0000027858BB0000-memory.dmp
memory/924-70-0x0000027856F60000-0x0000027856F61000-memory.dmp
memory/924-73-0x0000027858C50000-0x0000027858C60000-memory.dmp
memory/924-72-0x0000027858BB0000-0x0000027858BC0000-memory.dmp
memory/924-79-0x0000027858C60000-0x0000027858C70000-memory.dmp
memory/924-77-0x0000027858BC0000-0x0000027858BD0000-memory.dmp
memory/924-81-0x0000027858BD0000-0x0000027858BE0000-memory.dmp
memory/924-82-0x0000027858C70000-0x0000027858C80000-memory.dmp
memory/924-85-0x0000027856F60000-0x0000027856F61000-memory.dmp
memory/924-86-0x0000027856F60000-0x0000027856F61000-memory.dmp
memory/924-88-0x0000027858C80000-0x0000027858C90000-memory.dmp
memory/924-87-0x0000027858BE0000-0x0000027858BF0000-memory.dmp
memory/924-92-0x0000027858C90000-0x0000027858CA0000-memory.dmp
memory/924-95-0x0000027858CA0000-0x0000027858CB0000-memory.dmp
memory/924-93-0x0000027858C00000-0x0000027858C10000-memory.dmp
memory/924-90-0x0000027858BF0000-0x0000027858C00000-memory.dmp
memory/924-96-0x0000027858C10000-0x0000027858C20000-memory.dmp
memory/924-97-0x0000027858CB0000-0x0000027858CC0000-memory.dmp
memory/924-99-0x0000027858C20000-0x0000027858C30000-memory.dmp
memory/924-100-0x0000027858CC0000-0x0000027858CD0000-memory.dmp
memory/924-102-0x0000027858C30000-0x0000027858C40000-memory.dmp
memory/924-103-0x0000027858CD0000-0x0000027858CE0000-memory.dmp
memory/924-105-0x0000027858C40000-0x0000027858C50000-memory.dmp
memory/924-106-0x0000027858CE0000-0x0000027858CF0000-memory.dmp
memory/924-110-0x0000027858CF0000-0x0000027858D00000-memory.dmp
memory/924-109-0x0000027858C50000-0x0000027858C60000-memory.dmp
memory/924-113-0x0000027858D00000-0x0000027858D10000-memory.dmp
memory/924-112-0x0000027858C60000-0x0000027858C70000-memory.dmp
memory/924-117-0x0000027856F60000-0x0000027856F61000-memory.dmp
memory/924-121-0x0000027858D10000-0x0000027858D20000-memory.dmp
memory/924-120-0x0000027858C70000-0x0000027858C80000-memory.dmp
memory/924-122-0x0000027858C80000-0x0000027858C90000-memory.dmp
memory/924-123-0x0000027858D20000-0x0000027858D30000-memory.dmp
memory/924-125-0x0000027858C90000-0x0000027858CA0000-memory.dmp
memory/924-126-0x0000027858D30000-0x0000027858D40000-memory.dmp
memory/924-129-0x0000027858D40000-0x0000027858D50000-memory.dmp
memory/924-128-0x0000027858CA0000-0x0000027858CB0000-memory.dmp
memory/924-133-0x0000027858CB0000-0x0000027858CC0000-memory.dmp
memory/924-134-0x0000027858D50000-0x0000027858D60000-memory.dmp
memory/924-137-0x0000027858D60000-0x0000027858D70000-memory.dmp
memory/924-136-0x0000027858CC0000-0x0000027858CD0000-memory.dmp
memory/924-139-0x0000027858CD0000-0x0000027858CE0000-memory.dmp
memory/924-140-0x0000027858D70000-0x0000027858D80000-memory.dmp
memory/924-142-0x0000027858CE0000-0x0000027858CF0000-memory.dmp
memory/924-143-0x0000027858D80000-0x0000027858D90000-memory.dmp
memory/924-148-0x0000027858D00000-0x0000027858D10000-memory.dmp
memory/924-147-0x0000027858D90000-0x0000027858DA0000-memory.dmp
memory/924-146-0x0000027858CF0000-0x0000027858D00000-memory.dmp
memory/924-150-0x0000027858D10000-0x0000027858D20000-memory.dmp
memory/924-151-0x0000027858DB0000-0x0000027858DC0000-memory.dmp
memory/924-153-0x0000027858D20000-0x0000027858D30000-memory.dmp
memory/924-154-0x0000027858DC0000-0x0000027858DD0000-memory.dmp
memory/924-156-0x0000027858D30000-0x0000027858D40000-memory.dmp
memory/924-157-0x0000027858DD0000-0x0000027858DE0000-memory.dmp
memory/924-159-0x0000027858D40000-0x0000027858D50000-memory.dmp
memory/924-160-0x0000027858DE0000-0x0000027858DF0000-memory.dmp
memory/924-162-0x0000027856F60000-0x0000027856F61000-memory.dmp
memory/924-163-0x0000027858D50000-0x0000027858D60000-memory.dmp
memory/924-165-0x0000027858DF0000-0x0000027858E00000-memory.dmp
memory/924-168-0x0000027858D60000-0x0000027858D70000-memory.dmp
memory/924-169-0x0000027858E00000-0x0000027858E10000-memory.dmp
memory/924-171-0x0000027858D70000-0x0000027858D80000-memory.dmp
memory/924-172-0x0000027858E10000-0x0000027858E20000-memory.dmp
memory/924-174-0x0000027858D80000-0x0000027858D90000-memory.dmp
memory/924-175-0x0000027858E20000-0x0000027858E30000-memory.dmp
memory/924-178-0x0000027858DA0000-0x0000027858DB0000-memory.dmp
memory/924-177-0x0000027858D90000-0x0000027858DA0000-memory.dmp
memory/924-179-0x0000027858E30000-0x0000027858E40000-memory.dmp
memory/924-181-0x0000027858E40000-0x0000027858E50000-memory.dmp
memory/924-183-0x0000027858DB0000-0x0000027858DC0000-memory.dmp
memory/924-184-0x0000027858E50000-0x0000027858E60000-memory.dmp
memory/924-186-0x0000027858DC0000-0x0000027858DD0000-memory.dmp
memory/924-230-0x0000027856F60000-0x0000027856F61000-memory.dmp
memory/924-242-0x0000027856F60000-0x0000027856F61000-memory.dmp
memory/4848-0-0x0000000000400000-0x0000000000419000-memory.dmp