Analysis
- max time kernel
150s - max time network
129s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
- submitted
06/08/2026, 13:34
General
- Target i2pinstall_2.13.0_windows (1).exe
- Size 26.4MB
- Sample260806-qvb8dascph
- SHA256 d83528db40421800d0c2f3e787da1e614540d282cf385deb16b45cce1f943c6c
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious use of SetWindowsHookEx 4 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\i2pinstall_2.13.0_windows (1).exe"C:\Users\Admin\AppData\Local\Temp\i2pinstall_2.13.0_windows (1).exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaw.exe"C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaw.exe" -jar "install.jar"2⤵
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
install.jar
memory/4040-5-0x00000119B7510000-0x00000119B7780000-memory.dmp
memory/4040-14-0x00000119B5CB0000-0x00000119B5CB1000-memory.dmp
memory/4040-16-0x00000119B5CB0000-0x00000119B5CB1000-memory.dmp
memory/4040-19-0x00000119B7780000-0x00000119B7790000-memory.dmp
memory/4040-20-0x00000119B7790000-0x00000119B77A0000-memory.dmp
memory/4040-24-0x00000119B77B0000-0x00000119B77C0000-memory.dmp
memory/4040-23-0x00000119B77A0000-0x00000119B77B0000-memory.dmp
memory/4040-28-0x00000119B77D0000-0x00000119B77E0000-memory.dmp
memory/4040-27-0x00000119B77C0000-0x00000119B77D0000-memory.dmp
memory/4040-30-0x00000119B77E0000-0x00000119B77F0000-memory.dmp
memory/4040-34-0x00000119B77F0000-0x00000119B7800000-memory.dmp
memory/4040-33-0x00000119B7510000-0x00000119B7780000-memory.dmp
memory/4040-36-0x00000119B7800000-0x00000119B7810000-memory.dmp
memory/4040-38-0x00000119B7810000-0x00000119B7820000-memory.dmp
memory/4040-42-0x00000119B7820000-0x00000119B7830000-memory.dmp
memory/4040-45-0x00000119B7830000-0x00000119B7840000-memory.dmp
memory/4040-48-0x00000119B77B0000-0x00000119B77C0000-memory.dmp
memory/4040-47-0x00000119B77A0000-0x00000119B77B0000-memory.dmp
memory/4040-46-0x00000119B7840000-0x00000119B7850000-memory.dmp
memory/4040-50-0x00000119B7850000-0x00000119B7860000-memory.dmp
memory/4040-44-0x00000119B7790000-0x00000119B77A0000-memory.dmp
memory/4040-41-0x00000119B7780000-0x00000119B7790000-memory.dmp
memory/4040-54-0x00000119B7860000-0x00000119B7870000-memory.dmp
memory/4040-53-0x00000119B77D0000-0x00000119B77E0000-memory.dmp
memory/4040-52-0x00000119B77C0000-0x00000119B77D0000-memory.dmp
memory/4040-60-0x00000119B7870000-0x00000119B7880000-memory.dmp
memory/4040-62-0x00000119B77E0000-0x00000119B77F0000-memory.dmp
memory/4040-61-0x00000119B7880000-0x00000119B7890000-memory.dmp
memory/4040-65-0x00000119B77F0000-0x00000119B7800000-memory.dmp
memory/4040-66-0x00000119B7890000-0x00000119B78A0000-memory.dmp
memory/4040-71-0x00000119B78A0000-0x00000119B78B0000-memory.dmp
memory/4040-73-0x00000119B7810000-0x00000119B7820000-memory.dmp
memory/4040-72-0x00000119B78B0000-0x00000119B78C0000-memory.dmp
memory/4040-70-0x00000119B7800000-0x00000119B7810000-memory.dmp
memory/4040-75-0x00000119B5CB0000-0x00000119B5CB1000-memory.dmp
memory/4040-79-0x00000119B78C0000-0x00000119B78D0000-memory.dmp
memory/4040-78-0x00000119B7820000-0x00000119B7830000-memory.dmp
memory/4040-83-0x00000119B7840000-0x00000119B7850000-memory.dmp
memory/4040-84-0x00000119B78D0000-0x00000119B78E0000-memory.dmp
memory/4040-82-0x00000119B7830000-0x00000119B7840000-memory.dmp
memory/4040-86-0x00000119B78E0000-0x00000119B78F0000-memory.dmp
memory/4040-87-0x00000119B5CB0000-0x00000119B5CB1000-memory.dmp
memory/4040-89-0x00000119B7850000-0x00000119B7860000-memory.dmp
memory/4040-90-0x00000119B78F0000-0x00000119B7900000-memory.dmp
memory/4040-93-0x00000119B7900000-0x00000119B7910000-memory.dmp
memory/4040-92-0x00000119B7860000-0x00000119B7870000-memory.dmp
memory/4040-96-0x00000119B7880000-0x00000119B7890000-memory.dmp
memory/4040-97-0x00000119B7910000-0x00000119B7920000-memory.dmp
memory/4040-95-0x00000119B7870000-0x00000119B7880000-memory.dmp
memory/4040-99-0x00000119B7920000-0x00000119B7930000-memory.dmp
memory/4040-104-0x00000119B7890000-0x00000119B78A0000-memory.dmp
memory/4040-105-0x00000119B7930000-0x00000119B7940000-memory.dmp
memory/4040-112-0x00000119B7940000-0x00000119B7950000-memory.dmp
memory/4040-111-0x00000119B78B0000-0x00000119B78C0000-memory.dmp
memory/4040-114-0x00000119B7950000-0x00000119B7960000-memory.dmp
memory/4040-119-0x00000119B7960000-0x00000119B7970000-memory.dmp
memory/4040-118-0x00000119B78C0000-0x00000119B78D0000-memory.dmp
memory/4040-138-0x00000119B7970000-0x00000119B7980000-memory.dmp
memory/4040-137-0x00000119B78D0000-0x00000119B78E0000-memory.dmp
memory/4040-150-0x00000119B78E0000-0x00000119B78F0000-memory.dmp
memory/4040-151-0x00000119B7980000-0x00000119B7990000-memory.dmp
memory/4040-166-0x00000119B7990000-0x00000119B79A0000-memory.dmp
memory/4040-165-0x00000119B78F0000-0x00000119B7900000-memory.dmp
memory/4040-188-0x00000119B7900000-0x00000119B7910000-memory.dmp
memory/4040-189-0x00000119B79A0000-0x00000119B79B0000-memory.dmp
memory/4040-194-0x00000119B5CB0000-0x00000119B5CB1000-memory.dmp
memory/4040-195-0x00000119B5CB0000-0x00000119B5CB1000-memory.dmp
memory/4040-198-0x00000119B7910000-0x00000119B7920000-memory.dmp
memory/4040-199-0x00000119B79B0000-0x00000119B79C0000-memory.dmp
memory/4040-203-0x00000119B79C0000-0x00000119B79D0000-memory.dmp
memory/4040-202-0x00000119B7920000-0x00000119B7930000-memory.dmp
memory/4040-205-0x00000119B7930000-0x00000119B7940000-memory.dmp
memory/4040-206-0x00000119B79D0000-0x00000119B79E0000-memory.dmp
memory/4040-209-0x00000119B7940000-0x00000119B7950000-memory.dmp
memory/4040-210-0x00000119B79E0000-0x00000119B79F0000-memory.dmp
memory/4040-213-0x00000119B79F0000-0x00000119B7A00000-memory.dmp
memory/4040-212-0x00000119B7950000-0x00000119B7960000-memory.dmp
memory/4040-216-0x00000119B7960000-0x00000119B7970000-memory.dmp
memory/4040-217-0x00000119B7A00000-0x00000119B7A10000-memory.dmp
memory/4040-219-0x00000119B7970000-0x00000119B7980000-memory.dmp
memory/4040-220-0x00000119B7A10000-0x00000119B7A20000-memory.dmp
memory/4040-221-0x00000119B5CB0000-0x00000119B5CB1000-memory.dmp
memory/4040-223-0x00000119B7980000-0x00000119B7990000-memory.dmp
memory/4040-224-0x00000119B7A20000-0x00000119B7A30000-memory.dmp
memory/4040-228-0x00000119B7A30000-0x00000119B7A40000-memory.dmp
memory/4040-227-0x00000119B7990000-0x00000119B79A0000-memory.dmp
memory/4040-230-0x00000119B79A0000-0x00000119B79B0000-memory.dmp
memory/4040-231-0x00000119B7A40000-0x00000119B7A50000-memory.dmp
memory/4040-234-0x00000119B7A50000-0x00000119B7A60000-memory.dmp
memory/4040-233-0x00000119B79B0000-0x00000119B79C0000-memory.dmp
memory/4040-236-0x00000119B79C0000-0x00000119B79D0000-memory.dmp
memory/4040-237-0x00000119B7A60000-0x00000119B7A70000-memory.dmp
memory/4040-241-0x00000119B7A70000-0x00000119B7A80000-memory.dmp
memory/4040-240-0x00000119B79D0000-0x00000119B79E0000-memory.dmp
memory/4040-243-0x00000119B79E0000-0x00000119B79F0000-memory.dmp
memory/4040-245-0x00000119B79F0000-0x00000119B7A00000-memory.dmp
memory/4040-246-0x00000119B7A80000-0x00000119B7A90000-memory.dmp
memory/4040-248-0x00000119B7A00000-0x00000119B7A10000-memory.dmp
memory/4040-249-0x00000119B7A90000-0x00000119B7AA0000-memory.dmp
memory/4040-252-0x00000119B7A10000-0x00000119B7A20000-memory.dmp
memory/4040-253-0x00000119B7AA0000-0x00000119B7AB0000-memory.dmp
memory/4040-255-0x00000119B7A20000-0x00000119B7A30000-memory.dmp
memory/4040-258-0x00000119B7A30000-0x00000119B7A40000-memory.dmp