Analysis
- user interaction
yes - max time kernel
149s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
31/07/2026, 01:17
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
skintotem.jar
Resource
win11-20260513-en
2 signatures
150 seconds
General
- Target skintotem.jar
- Size 129KB
- Sample260731-bnt3aaae63
- SHA256 2142f943923f17831f104b440912da883ac5ee6ad66ce00c0f3355115d536c73
- MD5 4104b136c7bf6a622ddb5d09c14563a7
- SHA1 575435638f7974dd85909bb1fc24c277911defd0
- SHA512 fa875cb539149d24f5a6978aee4b5a51bb3abac5b0fa9370aef2a3c6da4d415c5ce99d552542d081fc17ed28acfccb3eebb92e5528a19e8b0a8db52de9e3c823
- SSDEEP 1536:19toDO+Dntkp9MhUXp8D0gYoQOYoHetmIwp51W9ZEnlVKYWnZLVBvxruu2S4Jli9:RoDvDnqzqUuDEOf8ok9y+LVhxr5nCU
- TLSH T11CD3F13A19ACF4A2DDBBF334CD4B4582FCE86964C1C2B1A7897411237CEF5E90631692
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2409539145-3342400454-2096821238-1000_Classes\Local Settings\MuiCache MiniSearchHost.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 908 MiniSearchHost.exe
Processes
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -jar C:\Users\Admin\AppData\Local\Temp\skintotem.jar1⤵PID:5180
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:4888
-
C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:908
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat
- Size 22KB
- SHA256 3fdfee57ea6cee3b1bc8b20e34b4d7900c9ec1b2144e1f557d39f166083fe311
- MD5 5dabfdf47b1f337e2d56f2cf041877f2
- SHA1 b6be98e16aca1fbfbd0fbc39ca059840cb9d5fa2
- SHA512 22a1e925ffb431a304d0ed0ab15cdf69168ea73b574f003da26a4e1db461b8d487794cbc906633c19d120232c56d62165ae7263be7528fef16b5f1b199cc0382
- SSDEEP 384:nJWJiVca12krtuVm+GglBOVjeQ8RJoz4ghnjUKHWk5PUm5k+GDa50VUGYAVYc63A:J+iVcWr7l8RJ04g9jUKHlBk+GDa50VUe
- TLSH T14FA23C743AF51319F3F69F749AF1A95A643AB866AC00DB4D0162028D0977D92CDB0F3B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat
- Size 22KB
- SHA256 f223d29714ca17fdf6de261fb82e6c440015b1c0cab62b6b2c22ef0a14410cf2
- MD5 7da94da55d70579cc9e540bb4159e3cf
- SHA1 5a708b41ee7b9244ebfd100babcc7bc608325206
- SHA512 ac1248b31e66fae6c4b1cf8c7d1ced726a0b23f145fdb7d19e54f4795af6af467c2f09972a9af6326a5610e29dc560bbb6471c685caf13426f00360ef1861032
- SSDEEP 384:wJWJiVca12krtuVm+GglBOVjeQ8RJoB4ghnjUKHWk5PUm5k+GDa50VUGYAVYc63A:s+iVcWr7l8RJK4g9jUKHlBk+GDa50VUe
- TLSH T1C4A24C743AF51319F3F69F749AF1A95A643AB866AC00DB4D0162028D0977D92CDB0F3B
- MD5 SHA1 SHA512 SSDEEP TLSH