Analysis

  • user interaction
    yes
  • max time kernel
    149s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    31/07/2026, 01:17

General

  • Target
    skintotem.jar
  • Size 129KB
  • Sample260731-bnt3aaae63
  • SHA256 2142f943923f17831f104b440912da883ac5ee6ad66ce00c0f3355115d536c73
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Modifies registry class 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\skintotem.jar
    1⤵
      PID:5180
    • C:\Windows\System32\rundll32.exe
      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
      1⤵
        PID:4888
      • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe
        "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca
        1⤵
        • Modifies registry class
        • Suspicious use of SetWindowsHookEx
        PID:908

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            SearchHoverUnifiedTileModelCache.dat

            • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat
            • Size 22KB
            • SHA256 3fdfee57ea6cee3b1bc8b20e34b4d7900c9ec1b2144e1f557d39f166083fe311
            • MD5 SHA1 SHA512 SSDEEP TLSH

            SearchHoverUnifiedTileModelCache.dat

            • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat
            • Size 22KB
            • SHA256 f223d29714ca17fdf6de261fb82e6c440015b1c0cab62b6b2c22ef0a14410cf2
            • MD5 SHA1 SHA512 SSDEEP TLSH

            memory/5180-2-0x0000021B1A610000-0x0000021B1A880000-memory.dmp

            memory/5180-12-0x0000021B1A5F0000-0x0000021B1A5F1000-memory.dmp

            memory/5180-13-0x0000021B1A610000-0x0000021B1A880000-memory.dmp