Analysis
- max time kernel
599s - max time network
600s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
08/08/2026, 17:42
Static task
static1
Behavioral task
behavioral1
Sample
jre-8u501-windows-x64.exe
Resource
win10v2004-20260513-en
27 signatures
600 seconds
Behavioral task
behavioral2
Sample
jre-8u501-windows-x64.exe
Resource
win11ltsc2024-20260709-en
3 signatures
600 seconds
General
- Target jre-8u501-windows-x64.exe
- Size 69.0MB
- Sample260808-v97eaabj5v
- SHA256 d99eb213b11b84fed4d0ffbb7595c77c7b952035a9025ed062c2d9c95ea22a8e
- MD5 bc25fff67a597194a0cf9f5bcc95d5fb
- SHA1 da87a3326719adbc75f47af419d0655cfe83a22b
- SHA512 ae53e00ecd5ac1beefd283cdbf184e4f5872d97a2815c4055ff34b263633df89d63d33da0349e8ada791f4f6ddfd62423f72b054079989aad873a8996dd20bcc
- SSDEEP 1572864:GlOkrWiU2IupQIMc2IdOIzR8jd/41+ybBlkSDL:GlOkreOj9XY5le+yb7fL
- TLSH T15EF73306A7A44168E0FBE278CD274607E6B57C4643B1828F379D95962F333E09F7AB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
pid Process 1780 jre-8u501-windows-x64.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1780 jre-8u501-windows-x64.exe 1780 jre-8u501-windows-x64.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 5384 wrote to memory of 1780 5384 jre-8u501-windows-x64.exe 89
Processes
-
C:\Users\Admin\AppData\Local\Temp\jre-8u501-windows-x64.exe"C:\Users\Admin\AppData\Local\Temp\jre-8u501-windows-x64.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:5384 -
C:\Users\Admin\AppData\Local\Temp\jds240741000.tmp\jre-8u501-windows-x64.exe"C:\Users\Admin\AppData\Local\Temp\jds240741000.tmp\jre-8u501-windows-x64.exe"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
PID:1780
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:4616
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\jusched.log
- Size 185KB
- SHA256 80ae04a0445ddae3ce3686045fd0e81db84e1022713936471451b0a3bf9bfc9c
- MD5 5b67a115afd18b1574718e47abfb0e10
- SHA1 a0315e7662c5eafc2585d5177a997e8668027e0b
- SHA512 d1533a50bcacfd497f5c6c1dc23c769ebe89ad1037fab09371a9f3ad05002a77ee8ced5283fdbfaef5f944eb7fceeeaf75f530fb9cec248af6f2f99f3960a158
- SSDEEP 3072:YsCVL+3m+PvFz6AZEfeTdmo9Alec55oTg2MzRYYCtDlefHeAPRCRdWI:Zz6AZEfeTdJxcA
- TLSH T15A044286C52E44FB34134B8783BA6C7455A6225F53AD8A1C22CF86DF7645803CE6F4EE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\jusched.log
- Size 164KB
- SHA256 2a5f6ce34e8c6d8c37a68d7698abb903e97d963d95a18cabd2081eea4431ee0f
- MD5 be9ee385b8b96b97cdcbc458f6661eb1
- SHA1 2c7066b490029304c0a414434977eb2bc6a9070f
- SHA512 52b380b60dc650fe37f3c19540a92270b4cef53ea8bdb48929e4a125bae8fb0242c9db9381ea750d8bd0f04d5f1e2ee2d5f41bc36ae6cad67f852fa0f95fd496
- SSDEEP 3072:YsCVL+3m+PvFz6AZEfeTdmo9Alec55oTg2MzRYYCtDlefHeAPRCRw:Zz6AZEfeTdJxc3
- TLSH T1D4F32186852E44FB34138B8783BA6C7445A6255F53AD891C22CFC6EF76458038F6F4EE
- MD5 SHA1 SHA512 SSDEEP TLSH