Analysis
- max time kernel
148s - max time network
124s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
22/08/2026, 13:14
General
- Target PlayRSCRevived.jar
- Size 8.6MB
- Sample260822-qgzfrayzhy
- SHA256 6046a1fe7f0a17553149cd7f01be46f42c924c82ab4e04baf2e335060c9cae38
Malware Config
Signatures
- Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -jar C:\Users\Admin\AppData\Local\Temp\PlayRSCRevived.jar1⤵
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
clientSettings.conf
discord_inuse.txt
memory/4092-2-0x000001771A4C0000-0x000001771A730000-memory.dmp
memory/4092-14-0x0000017718CD0000-0x0000017718CD1000-memory.dmp
memory/4092-104-0x000001771A730000-0x000001771A740000-memory.dmp
memory/4092-106-0x000001771A740000-0x000001771A750000-memory.dmp
memory/4092-108-0x000001771A750000-0x000001771A760000-memory.dmp
memory/4092-111-0x000001771A760000-0x000001771A770000-memory.dmp
memory/4092-112-0x0000017718CD0000-0x0000017718CD1000-memory.dmp
memory/4092-113-0x000001771A770000-0x000001771A780000-memory.dmp
memory/4092-115-0x000001771A780000-0x000001771A790000-memory.dmp
memory/4092-117-0x000001771A790000-0x000001771A7A0000-memory.dmp
memory/4092-119-0x000001771A7A0000-0x000001771A7B0000-memory.dmp
memory/4092-123-0x000001771A7B0000-0x000001771A7C0000-memory.dmp
memory/4092-125-0x000001771A7C0000-0x000001771A7D0000-memory.dmp
memory/4092-122-0x000001771A4C0000-0x000001771A730000-memory.dmp
memory/4092-132-0x000001771A730000-0x000001771A740000-memory.dmp
memory/4092-133-0x000001771A7D0000-0x000001771A7E0000-memory.dmp
memory/4092-136-0x000001771A7E0000-0x000001771A7F0000-memory.dmp
memory/4092-135-0x000001771A740000-0x000001771A750000-memory.dmp
memory/4092-143-0x000001771A7F0000-0x000001771A800000-memory.dmp
memory/4092-142-0x000001771A750000-0x000001771A760000-memory.dmp
memory/4092-146-0x000001771A800000-0x000001771A810000-memory.dmp
memory/4092-145-0x000001771A760000-0x000001771A770000-memory.dmp
memory/4092-151-0x000001771A810000-0x000001771A820000-memory.dmp
memory/4092-150-0x000001771A770000-0x000001771A780000-memory.dmp
memory/4092-154-0x000001771A820000-0x000001771A830000-memory.dmp
memory/4092-153-0x000001771A780000-0x000001771A790000-memory.dmp
memory/4092-158-0x000001771A790000-0x000001771A7A0000-memory.dmp
memory/4092-159-0x000001771A830000-0x000001771A840000-memory.dmp
memory/4092-162-0x000001771A840000-0x000001771A850000-memory.dmp
memory/4092-161-0x000001771A7A0000-0x000001771A7B0000-memory.dmp
memory/4092-168-0x000001771A7B0000-0x000001771A7C0000-memory.dmp
memory/4092-169-0x000001771A850000-0x000001771A860000-memory.dmp
memory/4092-174-0x000001771A860000-0x000001771A870000-memory.dmp
memory/4092-173-0x000001771A7C0000-0x000001771A7D0000-memory.dmp
memory/4092-177-0x000001771A870000-0x000001771A880000-memory.dmp
memory/4092-176-0x000001771A7D0000-0x000001771A7E0000-memory.dmp
memory/4092-179-0x000001771A880000-0x000001771A890000-memory.dmp
memory/4092-178-0x000001771A7E0000-0x000001771A7F0000-memory.dmp
memory/4092-182-0x000001771A7F0000-0x000001771A800000-memory.dmp
memory/4092-185-0x000001771A800000-0x000001771A810000-memory.dmp
memory/4092-184-0x000001771A8A0000-0x000001771A8B0000-memory.dmp
memory/4092-183-0x000001771A890000-0x000001771A8A0000-memory.dmp
memory/4092-187-0x000001771A810000-0x000001771A820000-memory.dmp
memory/4092-188-0x000001771A8B0000-0x000001771A8C0000-memory.dmp
memory/4092-192-0x000001771A820000-0x000001771A830000-memory.dmp
memory/4092-196-0x000001771A8D0000-0x000001771A8E0000-memory.dmp
memory/4092-195-0x000001771A830000-0x000001771A840000-memory.dmp
memory/4092-193-0x000001771A8C0000-0x000001771A8D0000-memory.dmp
memory/4092-201-0x000001771A8E0000-0x000001771A8F0000-memory.dmp
memory/4092-200-0x000001771A840000-0x000001771A850000-memory.dmp
memory/4092-209-0x000001771A860000-0x000001771A870000-memory.dmp
memory/4092-208-0x000001771A8F0000-0x000001771A900000-memory.dmp
memory/4092-207-0x000001771A900000-0x000001771A910000-memory.dmp
memory/4092-206-0x000001771A850000-0x000001771A860000-memory.dmp
memory/4092-214-0x000001771A910000-0x000001771A920000-memory.dmp
memory/4092-213-0x000001771A870000-0x000001771A880000-memory.dmp
memory/4092-217-0x000001771A920000-0x000001771A930000-memory.dmp
memory/4092-216-0x000001771A880000-0x000001771A890000-memory.dmp
memory/4092-223-0x000001771A930000-0x000001771A940000-memory.dmp
memory/4092-221-0x000001771A890000-0x000001771A8A0000-memory.dmp
memory/4092-222-0x000001771A8A0000-0x000001771A8B0000-memory.dmp
memory/4092-226-0x000001771A940000-0x000001771A950000-memory.dmp
memory/4092-234-0x000001771A950000-0x000001771A960000-memory.dmp
memory/4092-233-0x000001771A8B0000-0x000001771A8C0000-memory.dmp
memory/4092-236-0x000001771A960000-0x000001771A970000-memory.dmp
memory/4092-235-0x000001771A8C0000-0x000001771A8D0000-memory.dmp
memory/4092-239-0x000001771A970000-0x000001771A980000-memory.dmp
memory/4092-238-0x000001771A8D0000-0x000001771A8E0000-memory.dmp
memory/4092-244-0x000001771A990000-0x000001771A9A0000-memory.dmp
memory/4092-246-0x000001771A8F0000-0x000001771A900000-memory.dmp
memory/4092-245-0x000001771A900000-0x000001771A910000-memory.dmp
memory/4092-252-0x000001771A910000-0x000001771A920000-memory.dmp
memory/4092-254-0x000001771A920000-0x000001771A930000-memory.dmp
memory/4092-255-0x000001771A9C0000-0x000001771A9D0000-memory.dmp
memory/4092-258-0x000001771A9D0000-0x000001771A9E0000-memory.dmp
memory/4092-257-0x000001771A930000-0x000001771A940000-memory.dmp
memory/4092-251-0x000001771A9B0000-0x000001771A9C0000-memory.dmp
memory/4092-250-0x000001771A9A0000-0x000001771A9B0000-memory.dmp
memory/4092-243-0x000001771A980000-0x000001771A990000-memory.dmp
memory/4092-242-0x000001771A8E0000-0x000001771A8F0000-memory.dmp
memory/4092-260-0x000001771A940000-0x000001771A950000-memory.dmp
memory/4092-259-0x000001771A9E0000-0x000001771A9F0000-memory.dmp
memory/4092-263-0x000001771A9F0000-0x000001771AA00000-memory.dmp
memory/4092-262-0x000001771A950000-0x000001771A960000-memory.dmp
memory/4092-286-0x000001771A970000-0x000001771A980000-memory.dmp
memory/4092-285-0x000001771AA70000-0x000001771AA80000-memory.dmp
memory/4092-284-0x000001771AA50000-0x000001771AA60000-memory.dmp
memory/4092-282-0x000001771AA40000-0x000001771AA50000-memory.dmp
memory/4092-297-0x000001771AA90000-0x000001771AAA0000-memory.dmp
memory/4092-296-0x000001771AA80000-0x000001771AA90000-memory.dmp
memory/4092-295-0x000001771A990000-0x000001771A9A0000-memory.dmp
memory/4092-294-0x000001771A980000-0x000001771A990000-memory.dmp
memory/4092-281-0x000001771AA30000-0x000001771AA40000-memory.dmp
memory/4092-280-0x000001771AA20000-0x000001771AA30000-memory.dmp
memory/4092-279-0x000001771AA10000-0x000001771AA20000-memory.dmp
memory/4092-278-0x000001771AA00000-0x000001771AA10000-memory.dmp
memory/4092-277-0x000001771AA60000-0x000001771AA70000-memory.dmp
memory/4092-276-0x000001771A960000-0x000001771A970000-memory.dmp
memory/4092-413-0x0000017718CD0000-0x0000017718CD1000-memory.dmp