Analysis
- user interaction
yes - max time kernel
36s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
- submitted
17/08/2026, 03:56
General
- Target autoclicker.jar
- Size 8.9MB
- Sample260817-ehtq4stsb1
- SHA256 3645bc3471ccb710c70c604e65d3a9ca8d39cfd6b0799c02893064d44c12afd3
Malware Config
Signatures
- Loads dropped DLL 1 IoCs
- Discovers running processes 1 TTPs 2 IoCs
Running process information can be used to identify security tools or plan follow-on actions.
- Suspicious behavior: EnumeratesProcesses 13 IoCs
- Suspicious use of AdjustPrivilegeToken 2 IoCs
- Suspicious use of SetWindowsHookEx 2 IoCs
- Suspicious use of WriteProcessMemory 5 IoCs
Processes
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -jar C:\Users\Admin\AppData\Local\Temp\autoclicker.jar1⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Windows\SYSTEM32\tasklist.exetasklist /fo csv /nh2⤵
- Discovers running processes
- Suspicious use of AdjustPrivilegeToken
-
-
C:\Windows\SYSTEM32\reg.exereg query "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AeDebug" /v "Debugger"2⤵
-
-
C:\Windows\SYSTEM32\reg.exereg query "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AeDebug" /v "Debugger"2⤵
-
-
C:\Windows\SYSTEM32\reg.exereg query "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AeDebug" /v "Debugger"2⤵
-
-
C:\Windows\SYSTEM32\tasklist.exetasklist /FO CSV /NH2⤵
- Discovers running processes
- Suspicious use of AdjustPrivilegeToken
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
jna6854469048446982836.dll
memory/2796-57-0x0000025CD8D50000-0x0000025CD8D60000-memory.dmp
memory/2796-62-0x0000025CD8D60000-0x0000025CD8D70000-memory.dmp
memory/2796-61-0x0000025CD8D70000-0x0000025CD8D80000-memory.dmp
memory/2796-22-0x0000025CD8CC0000-0x0000025CD8CD0000-memory.dmp
memory/2796-27-0x0000025CD8CD0000-0x0000025CD8CE0000-memory.dmp
memory/2796-29-0x0000025CD8CE0000-0x0000025CD8CF0000-memory.dmp
memory/2796-31-0x0000025CD8CF0000-0x0000025CD8D00000-memory.dmp
memory/2796-35-0x0000025CD8D00000-0x0000025CD8D10000-memory.dmp
memory/2796-37-0x0000025CD8D10000-0x0000025CD8D20000-memory.dmp
memory/2796-38-0x0000025CD7220000-0x0000025CD7221000-memory.dmp
memory/2796-40-0x0000025CD8A50000-0x0000025CD8CC0000-memory.dmp
memory/2796-41-0x0000025CD8CC0000-0x0000025CD8CD0000-memory.dmp
memory/2796-44-0x0000025CD8D20000-0x0000025CD8D30000-memory.dmp
memory/2796-43-0x0000025CD8CD0000-0x0000025CD8CE0000-memory.dmp
memory/2796-47-0x0000025CD8D30000-0x0000025CD8D40000-memory.dmp
memory/2796-46-0x0000025CD8CE0000-0x0000025CD8CF0000-memory.dmp
memory/2796-53-0x0000025CD8D40000-0x0000025CD8D50000-memory.dmp
memory/2796-52-0x0000025CD8CF0000-0x0000025CD8D00000-memory.dmp
memory/2796-54-0x0000025CD7220000-0x0000025CD7221000-memory.dmp
memory/2796-2-0x0000025CD8A50000-0x0000025CD8CC0000-memory.dmp
memory/2796-11-0x0000025CD7220000-0x0000025CD7221000-memory.dmp
memory/2796-56-0x0000025CD8D00000-0x0000025CD8D10000-memory.dmp
memory/2796-23-0x0000025CD7220000-0x0000025CD7221000-memory.dmp
memory/2796-60-0x0000025CD8D10000-0x0000025CD8D20000-memory.dmp
memory/2796-66-0x0000025CD8D80000-0x0000025CD8D90000-memory.dmp
memory/2796-65-0x0000025CD7220000-0x0000025CD7221000-memory.dmp
memory/2796-69-0x0000025CD8D90000-0x0000025CD8DA0000-memory.dmp
memory/2796-70-0x0000025CD8DA0000-0x0000025CD8DB0000-memory.dmp
memory/2796-98-0x0000025CD7220000-0x0000025CD7221000-memory.dmp
memory/2796-105-0x0000025CD7220000-0x0000025CD7221000-memory.dmp
memory/2796-111-0x0000025CD7220000-0x0000025CD7221000-memory.dmp
memory/2796-128-0x0000025CD7220000-0x0000025CD7221000-memory.dmp
memory/2796-136-0x0000025CD7220000-0x0000025CD7221000-memory.dmp
memory/2796-236-0x0000025CD8D20000-0x0000025CD8D30000-memory.dmp
memory/2796-237-0x0000025CD8D30000-0x0000025CD8D40000-memory.dmp
memory/2796-238-0x0000025CD8D40000-0x0000025CD8D50000-memory.dmp
memory/2796-239-0x0000025CD8D50000-0x0000025CD8D60000-memory.dmp
memory/2796-241-0x0000025CD8D60000-0x0000025CD8D70000-memory.dmp
memory/2796-240-0x0000025CD8D70000-0x0000025CD8D80000-memory.dmp
memory/2796-242-0x0000025CD8D80000-0x0000025CD8D90000-memory.dmp
memory/2796-243-0x0000025CD8D90000-0x0000025CD8DA0000-memory.dmp
memory/2796-244-0x0000025CD8DA0000-0x0000025CD8DB0000-memory.dmp