Analysis
- user interaction
yes - max time kernel
149s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
30/07/2026, 01:11
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
dawn-standalone.jar
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
dawn-standalone.jar
Resource
win11ltsc2024-20260710-en
0 signatures
150 seconds
General
- Target dawn-standalone.jar
- Size 20KB
- Sample260730-bj4e6aztew
- SHA256 2562c3f67613debdff4c9f698ecfecde9eeb14bb39ff5f1a7fece2fc3beb274c
- MD5 c87f290800d5210df32e086463789319
- SHA1 f8dc77a8c8a3d83cc615405003c7efbcb896f3e2
- SHA512 192ab6482f9e90887090599d9a8719c5bd85974194504c2ea02827a661f1a443c27b7a304d0d4990ef2efe3acf06c29ada2c7eb0e530c4779dcf16014b4d3275
- SSDEEP 384:1xooVcbikb32l1QbqgvdjId/AzSEVnK8+U4LmYEYppIzcfK:1xnVcywXdjIBISEVnX7ehbppIZ
- TLSH T1A6A27D08994882FAD923C6355847E695981CA783C9227CAF1A90104CCBF58DFDBD3EFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Gathers system information 1 TTPs 1 IoCs
Runs systeminfo.exe.
pid Process 2096 systeminfo.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 3540 wrote to memory of 2096 3540 cmd.exe 101
Processes
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -jar C:\Users\Admin\AppData\Local\Temp\dawn-standalone.jar1⤵PID:1700
-
C:\Windows\system32\cmd.exe"C:\Windows\system32\cmd.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:3540 -
C:\Windows\system32\systeminfo.exesysteminfo2⤵
- Gathers system information
PID:2096
-