Analysis
- max time kernel
150s - max time network
131s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
08/08/2026, 12:52
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Ninjabrain-Bot-1.5.1.jar
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Ninjabrain-Bot-1.5.1.jar
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target Ninjabrain-Bot-1.5.1.jar
- Size 7.2MB
- Sample260808-p35n8a1wf1
- SHA256 471bbd0361224ebebd7cb05422646ff912c2d8b9a8b1ac080f20cf21a45caddc
- MD5 a0be5d4a54e6b4f8c572235dbfe1104f
- SHA1 eadc3aa67c2d586832569ec9f95bda242e2b90ca
- SHA512 b68ee29aafa1af3e468b6b3de0fa79c4b84084fa1829049d2a720756b043596c201e07a8d6c3b962b3e3901220f38ce68aa5e9a2fa176dc097cb0a382a6cf331
- SSDEEP 196608:/4c3vYXgIqGvo2TMWg848cb1vpGaUfKE2LrtsiS+J:3LINo+94RbJUauKEOtdn
- TLSH T1AC760272D152A478EF2705B391C3119639BF9798FA0F10FC25E8B9B3DA66C0B6B51720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 2 IoCs
pid Process 5744 java.exe 5744 java.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 5744 java.exe - Suspicious use of SetWindowsHookEx 64 IoCs
pid Process 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe 5744 java.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\JNativeHook.x86_64.dll
- Size 80KB
- SHA256 b8c331c9f915960201da9af9c9dc8309e95e7d533741e71f4a5d13ca007d3e18
- MD5 e9a449971b9efb0a2e12b9cfdd95c076
- SHA1 385777659fa84e94a3812eb9a8afad27ae3ceed4
- SHA512 bbcaf66b316cb60c63bb190099bee36a0059f13fa35fdf3a9a3e7e9a5304abe57acd71d644cde554427825249b460d58f0aba79f599f0c6fa40d23ea21aa941d
- SSDEEP 768:uBgVKEtsnmPFF1/xKn6qo8XwooW2+7iXCZ9NtAPf:uBlWNFxMnLoQ++7l7Uf
- TLSH T1DE833E66736881A5C82780FEC5510707E3767224130177EF69A0C6AE4F4FBDA3E3A75A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\jna-63116079\jna3778011623930293192.dll
- Size 248KB
- SHA256 13b2cac3f50368ab97fa2e3b0d0d2cb612f68449d5bbd6de187fc85ee4469d03
- MD5 34d12b1e2af72d9bb267bbc8c0d53e4a
- SHA1 d9ed8776645f6b4f52df16132450863c47ea92d7
- SHA512 c0a063477cf63a8b647ea721842968b506d70ea22c586a412707d7293b46c218b6a510f34b7dbedd3ed29a9d4b5dc5c6a1995403d65884b17348a9545e580a10
- SSDEEP 6144:9RW+uZb5K8Dy+Zkt9dHlJ1ybBEleb906aslm/mFyygW:9RW+MbMOEe3Z
- TLSH T13C440807A7B688E5E8B7C03D44236A12F6B178294320EBEB47444A575F67BE0DB3E750
- MD5 SHA1 SHA512 SSDEEP TLSH