Analysis
- user interaction
yes - max time kernel
38s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
20/08/2026, 22:18
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ExecPluginInjector.jar
Resource
win11-20260513-en
1 signatures
900 seconds
General
- Target ExecPluginInjector.jar
- Size 7.7MB
- Sample260820-174hhawfne
- SHA256 de49abbb2ae4ae9d064b54fd6146449341db8e9027c056830b1be08387f3ec0d
- MD5 9fcb48cec0e3d7e1ae211e06e5300e5b
- SHA1 5531c301def642362383bf231f6a7e0e8b4fc964
- SHA512 d1085c56c54e2fb32cd43cc57508d5996446472119e340ec81809334016a0fe1ae8dc87d19b6efcadbfe3bea4148fbc2d1b943aa39b4ac25fd0679ce4d38517f
- SSDEEP 196608:u6glm7Oqw2VPOJLAsGgciREngslLu8nTsLXG/VbOUd9:u6gQHxOJZGgciWBK8TsLX4dL
- TLSH T12986D057BDDCC42DF64F88321172807778688FE8D046A87715B45EA78C62C690B27BEE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3244 java.exe 3244 java.exe
Processes
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -jar C:\Users\Admin\AppData\Local\Temp\ExecPluginInjector.jar1⤵
- Suspicious use of SetWindowsHookEx
PID:3244
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:3236