Analysis
- max time kernel
148s - max time network
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
15/08/2026, 16:24
General
- Target BuildTools.exe
- Size 3.8MB
- Sample260815-twdpdazycz
- SHA256 127005f649555069c90b7f1a614ee1fbd9d192a209f6708ad1831f58c40419bd
Malware Config
Signatures
- Loads dropped DLL 1 IoCs
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious use of SetWindowsHookEx 2 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\BuildTools.exe"C:\Users\Admin\AppData\Local\Temp\BuildTools.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Java\jre-1.8\bin\javaw.exe"C:\Program Files\Java\jre-1.8\bin\javaw.exe" -classpath "C:\Users\Admin\AppData\Local\Temp\BuildTools.exe;java-diff-utils-copy-1.0.5.jar;guava-33.5.0-jre.jar;failureaccess-1.0.3.jar;listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar;jspecify-1.0.0.jar;error_prone_annotations-2.41.0.jar;j2objc-annotations-3.1.jar;jopt-simple-5.0.4.jar;org.eclipse.jgit-5.13.5.202508271544-r.jar;JavaEWAH-1.1.13.jar;slf4j-api-1.7.30.jar;slf4j-jdk14-1.7.30.jar;commons-io-2.21.0.jar;gson-2.13.2.jar;flatlaf-3.7.1.jar;javafinder-1.4.4.jar;commons-lang3-3.20.0.jar" org.spigotmc.gui.BuildToolsGui2⤵
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
flatlaf-windows-x86_64-6121270226200.dll
memory/3956-2-0x000001E39F1E0000-0x000001E39F450000-memory.dmp
memory/3956-11-0x000001E39D930000-0x000001E39D931000-memory.dmp
memory/3956-19-0x000001E39F450000-0x000001E39F460000-memory.dmp
memory/3956-21-0x000001E39F460000-0x000001E39F470000-memory.dmp
memory/3956-23-0x000001E39F470000-0x000001E39F480000-memory.dmp
memory/3956-25-0x000001E39F480000-0x000001E39F490000-memory.dmp
memory/3956-29-0x000001E39F490000-0x000001E39F4A0000-memory.dmp
memory/3956-30-0x000001E39D930000-0x000001E39D931000-memory.dmp
memory/3956-31-0x000001E39F4A0000-0x000001E39F4B0000-memory.dmp
memory/3956-33-0x000001E39F4B0000-0x000001E39F4C0000-memory.dmp
memory/3956-35-0x000001E39F4C0000-0x000001E39F4D0000-memory.dmp
memory/3956-41-0x000001E39F4D0000-0x000001E39F4E0000-memory.dmp
memory/3956-44-0x000001E39F500000-0x000001E39F510000-memory.dmp
memory/3956-47-0x000001E39F510000-0x000001E39F520000-memory.dmp
memory/3956-46-0x000001E39F450000-0x000001E39F460000-memory.dmp
memory/3956-43-0x000001E39F4E0000-0x000001E39F4F0000-memory.dmp
memory/3956-40-0x000001E39F1E0000-0x000001E39F450000-memory.dmp
memory/3956-42-0x000001E39F4F0000-0x000001E39F500000-memory.dmp
memory/3956-50-0x000001E39F520000-0x000001E39F530000-memory.dmp
memory/3956-49-0x000001E39F460000-0x000001E39F470000-memory.dmp
memory/3956-62-0x000001E39F490000-0x000001E39F4A0000-memory.dmp
memory/3956-61-0x000001E39F550000-0x000001E39F560000-memory.dmp
memory/3956-59-0x000001E39F480000-0x000001E39F490000-memory.dmp
memory/3956-53-0x000001E39F530000-0x000001E39F540000-memory.dmp
memory/3956-52-0x000001E39F470000-0x000001E39F480000-memory.dmp
memory/3956-60-0x000001E39F540000-0x000001E39F550000-memory.dmp
memory/3956-65-0x000001E39F560000-0x000001E39F570000-memory.dmp
memory/3956-68-0x000001E39F570000-0x000001E39F580000-memory.dmp
memory/3956-67-0x000001E39F4B0000-0x000001E39F4C0000-memory.dmp
memory/3956-64-0x000001E39F4A0000-0x000001E39F4B0000-memory.dmp
memory/3956-78-0x000001E39F5B0000-0x000001E39F5C0000-memory.dmp
memory/3956-77-0x000001E39F4D0000-0x000001E39F4E0000-memory.dmp
memory/3956-76-0x000001E39F5A0000-0x000001E39F5B0000-memory.dmp
memory/3956-86-0x000001E39F5E0000-0x000001E39F5F0000-memory.dmp
memory/3956-84-0x000001E39F5C0000-0x000001E39F5D0000-memory.dmp
memory/3956-83-0x000001E39F500000-0x000001E39F510000-memory.dmp
memory/3956-82-0x000001E39F4E0000-0x000001E39F4F0000-memory.dmp
memory/3956-75-0x000001E39F590000-0x000001E39F5A0000-memory.dmp
memory/3956-74-0x000001E39F580000-0x000001E39F590000-memory.dmp
memory/3956-73-0x000001E39F4F0000-0x000001E39F500000-memory.dmp
memory/3956-71-0x000001E39F4C0000-0x000001E39F4D0000-memory.dmp
memory/3956-87-0x000001E39F510000-0x000001E39F520000-memory.dmp
memory/3956-85-0x000001E39F5D0000-0x000001E39F5E0000-memory.dmp
memory/3956-90-0x000001E39F520000-0x000001E39F530000-memory.dmp
memory/3956-91-0x000001E39F5F0000-0x000001E39F600000-memory.dmp
memory/3956-93-0x000001E39F600000-0x000001E39F610000-memory.dmp
memory/3956-95-0x000001E39D930000-0x000001E39D931000-memory.dmp
memory/3956-99-0x000001E39F610000-0x000001E39F620000-memory.dmp
memory/3956-97-0x000001E39F540000-0x000001E39F550000-memory.dmp
memory/3956-92-0x000001E39F530000-0x000001E39F540000-memory.dmp
memory/3956-98-0x000001E39F550000-0x000001E39F560000-memory.dmp
memory/3956-101-0x000001E39F620000-0x000001E39F630000-memory.dmp
memory/3956-103-0x000001E39F630000-0x000001E39F640000-memory.dmp
memory/3956-102-0x000001E39F560000-0x000001E39F570000-memory.dmp
memory/3956-108-0x000001E39F640000-0x000001E39F650000-memory.dmp
memory/3956-107-0x000001E39F590000-0x000001E39F5A0000-memory.dmp
memory/3956-106-0x000001E39F570000-0x000001E39F580000-memory.dmp
memory/3956-112-0x000001E39F650000-0x000001E39F660000-memory.dmp
memory/3956-111-0x000001E39F5A0000-0x000001E39F5B0000-memory.dmp
memory/3956-110-0x000001E39F580000-0x000001E39F590000-memory.dmp
memory/3956-115-0x000001E39F5B0000-0x000001E39F5C0000-memory.dmp
memory/3956-116-0x000001E39F660000-0x000001E39F670000-memory.dmp
memory/3956-120-0x000001E39F5D0000-0x000001E39F5E0000-memory.dmp
memory/3956-121-0x000001E39F670000-0x000001E39F680000-memory.dmp
memory/3956-119-0x000001E39F5C0000-0x000001E39F5D0000-memory.dmp
memory/3956-124-0x000001E39F680000-0x000001E39F690000-memory.dmp
memory/3956-123-0x000001E39F5E0000-0x000001E39F5F0000-memory.dmp
memory/3956-130-0x000001E39F600000-0x000001E39F610000-memory.dmp
memory/3956-129-0x000001E39F6A0000-0x000001E39F6B0000-memory.dmp
memory/3956-128-0x000001E39F690000-0x000001E39F6A0000-memory.dmp
memory/3956-127-0x000001E39F5F0000-0x000001E39F600000-memory.dmp
memory/3956-138-0x000001E39F620000-0x000001E39F630000-memory.dmp
memory/3956-137-0x000001E39F6D0000-0x000001E39F6E0000-memory.dmp
memory/3956-136-0x000001E39F6C0000-0x000001E39F6D0000-memory.dmp
memory/3956-135-0x000001E39F6B0000-0x000001E39F6C0000-memory.dmp
memory/3956-141-0x000001E39F6E0000-0x000001E39F6F0000-memory.dmp
memory/3956-140-0x000001E39F630000-0x000001E39F640000-memory.dmp
memory/3956-134-0x000001E39F610000-0x000001E39F620000-memory.dmp
memory/3956-148-0x000001E39F700000-0x000001E39F710000-memory.dmp
memory/3956-149-0x000001E39F710000-0x000001E39F720000-memory.dmp
memory/3956-147-0x000001E39F6F0000-0x000001E39F700000-memory.dmp
memory/3956-153-0x000001E39F720000-0x000001E39F730000-memory.dmp
memory/3956-152-0x000001E39F660000-0x000001E39F670000-memory.dmp
memory/3956-146-0x000001E39F640000-0x000001E39F650000-memory.dmp
memory/3956-143-0x000001E39D930000-0x000001E39D931000-memory.dmp
memory/3956-150-0x000001E39F650000-0x000001E39F660000-memory.dmp
memory/3956-157-0x000001E39F670000-0x000001E39F680000-memory.dmp
memory/3956-161-0x000001E39F680000-0x000001E39F690000-memory.dmp
memory/3956-160-0x000001E39F740000-0x000001E39F750000-memory.dmp
memory/3956-159-0x000001E39F730000-0x000001E39F740000-memory.dmp
memory/3956-162-0x000001E39F690000-0x000001E39F6A0000-memory.dmp
memory/3956-164-0x000001E39F750000-0x000001E39F760000-memory.dmp
memory/3956-174-0x000001E39F780000-0x000001E39F790000-memory.dmp
memory/3956-173-0x000001E39F6D0000-0x000001E39F6E0000-memory.dmp
memory/3956-172-0x000001E39F6C0000-0x000001E39F6D0000-memory.dmp
memory/3956-177-0x000001E39F790000-0x000001E39F7A0000-memory.dmp
memory/3956-171-0x000001E39F6B0000-0x000001E39F6C0000-memory.dmp
memory/3956-170-0x000001E39F770000-0x000001E39F780000-memory.dmp
memory/3956-169-0x000001E39F760000-0x000001E39F770000-memory.dmp
memory/3956-163-0x000001E39F6A0000-0x000001E39F6B0000-memory.dmp
memory/3956-215-0x000001E39D930000-0x000001E39D931000-memory.dmp
memory/3956-259-0x000001E39D930000-0x000001E39D931000-memory.dmp
memory/3956-290-0x000001E39D930000-0x000001E39D931000-memory.dmp
memory/3956-307-0x000001E39D930000-0x000001E39D931000-memory.dmp
memory/3956-362-0x000001E39D930000-0x000001E39D931000-memory.dmp
memory/3956-386-0x000001E39D930000-0x000001E39D931000-memory.dmp
memory/3956-398-0x000001E39D930000-0x000001E39D931000-memory.dmp
memory/3956-383-0x000001E39D930000-0x000001E39D931000-memory.dmp
memory/4092-264-0x0000000000400000-0x0000000000463000-memory.dmp