Resubmissions

17/08/2026, 15:08

260817-sh9dfsshlf3

17/08/2026, 15:04

260817-sfnzqsdj8t8

Analysis

  • user interaction
    yes
  • max time kernel
    900s
  • max time network
    896s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    17/08/2026, 15:08

General

  • Target
    Java.jar
  • Size 124KB
  • Sample260817-sh9dfsshlf
  • SHA256 0ad9f9578a10ce2238010e76187aef8c9390bf023b74d6f591f488aade672f92
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\Java.jar
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:768
    • C:\Windows\System32\ipconfig.exe
      C:\Windows\System32\ipconfig.exe /all
      2⤵
      • Gathers network information
      PID:4304

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/768-2-0x0000018C21D00000-0x0000018C21F70000-memory.dmp

        memory/768-11-0x0000018C20490000-0x0000018C20491000-memory.dmp

        memory/768-15-0x0000018C21D00000-0x0000018C21F70000-memory.dmp

        memory/768-29-0x0000018C21F70000-0x0000018C21F80000-memory.dmp

        memory/768-28-0x0000018C21F80000-0x0000018C21F90000-memory.dmp

        memory/768-31-0x0000018C21F90000-0x0000018C21FA0000-memory.dmp

        memory/768-34-0x0000018C21F80000-0x0000018C21F90000-memory.dmp

        memory/768-35-0x0000018C21F70000-0x0000018C21F80000-memory.dmp

        memory/768-36-0x0000018C21F90000-0x0000018C21FA0000-memory.dmp

        memory/768-38-0x0000018C21FA0000-0x0000018C21FB0000-memory.dmp