Analysis
- max time kernel
150s - max time network
130s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
03/08/2026, 18:18
General
- Target MicroEmulator.exe
- Size 41.3MB
- Sample260803-wxswsshk8s
- SHA256 02d68318a4402ee7e762b62d2224777c241732aa99e4a3650ea61d62917f5c17
Malware Config
Signatures
- Executes dropped EXE 3 IoCs
- Loads dropped DLL 19 IoCs
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious use of SetWindowsHookEx 2 IoCs
- Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\MicroEmulator.exe"C:\Users\Admin\AppData\Local\Temp\MicroEmulator.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\warp\packages\MicroEmulator.exe\MicroEmulator.exe"C:\Users\Admin\AppData\Local\warp\packages\MicroEmulator.exe\MicroEmulator.exe"2⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\warp\packages\MicroEmulator.exe\jre\bin\javaw.exe"C:\Users\Admin\AppData\Local\warp\packages\MicroEmulator.exe\jre\bin\javaw.exe" -version3⤵
- Executes dropped EXE
- Loads dropped DLL
-
-
C:\Users\Admin\AppData\Local\warp\packages\MicroEmulator.exe\jre\bin\javaw.exe"C:\Users\Admin\AppData\Local\warp\packages\MicroEmulator.exe\jre\bin\javaw.exe" -jar "C:\Users\Admin\AppData\Local\warp\packages\MicroEmulator.exe\MicroEmulator.exe"3⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
-
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
MicroEmulator.exe
awt.dll
fontmanager.dll
freetype.dll
java.dll
javaw.exe
msvcp140.dll
net.dll
nio.dll
jvm.dll
vcruntime140.dll
vcruntime140_1.dll
verify.dll
zip.dll
accessibility.properties
jvm.cfg
meta-index
fontconfig.bfc
win32_LinkNoDrop32x32.gif
jfr.jar
meta-index
resources.jar
US_export_policy.jar
memory/2744-778-0x00000241F5D30000-0x00000241F5D31000-memory.dmp
memory/2744-780-0x0000024180000000-0x0000024180270000-memory.dmp
memory/2744-768-0x0000024180000000-0x0000024180270000-memory.dmp
memory/4812-808-0x00000155CD1D0000-0x00000155CD1D1000-memory.dmp
memory/4812-793-0x00000155CD2B0000-0x00000155CD520000-memory.dmp
memory/4812-824-0x00000155CD1D0000-0x00000155CD1D1000-memory.dmp
memory/4812-827-0x00000155CD1D0000-0x00000155CD1D1000-memory.dmp
memory/4812-838-0x00000155CD2B0000-0x00000155CD520000-memory.dmp
memory/5892-783-0x0000000000400000-0x0000000000541000-memory.dmp
memory/7116-782-0x0000000000400000-0x0000000000457000-memory.dmp