Analysis
- max time kernel
150s - max time network
113s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
23/08/2026, 14:05
General
- Target 44eu1s5.jar
- Size 2.8MB
- Sample260823-rdxcnaad95
- SHA256 333f65ea629abc721ce3b429fd00452eb32966e1c18735595d82d691da5ac6d8
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
- Suspicious use of AdjustPrivilegeToken 64 IoCs
- Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -jar C:\Users\Admin\AppData\Local\Temp\44eu1s5.jar1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1496-2-0x0000016667680000-0x00000166678F0000-memory.dmp
memory/1496-11-0x00000166669D0000-0x00000166669D1000-memory.dmp
memory/1496-19-0x00000166669D0000-0x00000166669D1000-memory.dmp
memory/1496-23-0x00000166678F0000-0x0000016667900000-memory.dmp
memory/1496-24-0x0000016667900000-0x0000016667910000-memory.dmp
memory/1496-25-0x0000016667910000-0x0000016667920000-memory.dmp
memory/1496-28-0x0000016667920000-0x0000016667930000-memory.dmp
memory/1496-30-0x0000016667930000-0x0000016667940000-memory.dmp
memory/1496-32-0x0000016667940000-0x0000016667950000-memory.dmp
memory/1496-40-0x0000016667960000-0x0000016667970000-memory.dmp
memory/1496-39-0x0000016667970000-0x0000016667980000-memory.dmp
memory/1496-38-0x0000016667950000-0x0000016667960000-memory.dmp
memory/1496-37-0x0000016667680000-0x00000166678F0000-memory.dmp
memory/1496-47-0x0000016667990000-0x00000166679A0000-memory.dmp
memory/1496-46-0x0000016667980000-0x0000016667990000-memory.dmp
memory/1496-53-0x00000166679B0000-0x00000166679C0000-memory.dmp
memory/1496-57-0x00000166679C0000-0x00000166679D0000-memory.dmp
memory/1496-59-0x00000166679D0000-0x00000166679E0000-memory.dmp
memory/1496-58-0x0000016667920000-0x0000016667930000-memory.dmp
memory/1496-56-0x0000016667910000-0x0000016667920000-memory.dmp
memory/1496-52-0x00000166679A0000-0x00000166679B0000-memory.dmp
memory/1496-51-0x0000016667900000-0x0000016667910000-memory.dmp
memory/1496-50-0x00000166678F0000-0x0000016667900000-memory.dmp
memory/1496-60-0x00000166669D0000-0x00000166669D1000-memory.dmp
memory/1496-63-0x0000016667930000-0x0000016667940000-memory.dmp
memory/1496-64-0x00000166679E0000-0x00000166679F0000-memory.dmp
memory/1496-69-0x00000166679F0000-0x0000016667A00000-memory.dmp
memory/1496-68-0x0000016667940000-0x0000016667950000-memory.dmp
memory/1496-70-0x00000166669D0000-0x00000166669D1000-memory.dmp
memory/1496-85-0x0000016667960000-0x0000016667970000-memory.dmp
memory/1496-89-0x0000016667A40000-0x0000016667A50000-memory.dmp
memory/1496-92-0x0000016667A50000-0x0000016667A60000-memory.dmp
memory/1496-100-0x0000016667A70000-0x0000016667A80000-memory.dmp
memory/1496-98-0x0000016606F30000-0x0000016606F31000-memory.dmp
memory/1496-96-0x0000016667A60000-0x0000016667A70000-memory.dmp
memory/1496-95-0x00000166679B0000-0x00000166679C0000-memory.dmp
memory/1496-94-0x00000166679A0000-0x00000166679B0000-memory.dmp
memory/1496-87-0x0000016667980000-0x0000016667990000-memory.dmp
memory/1496-84-0x0000016667A30000-0x0000016667A40000-memory.dmp
memory/1496-83-0x0000016667A20000-0x0000016667A30000-memory.dmp
memory/1496-82-0x0000016667A10000-0x0000016667A20000-memory.dmp
memory/1496-81-0x0000016667A00000-0x0000016667A10000-memory.dmp
memory/1496-88-0x0000016667990000-0x00000166679A0000-memory.dmp
memory/1496-79-0x0000016667950000-0x0000016667960000-memory.dmp
memory/1496-80-0x0000016667970000-0x0000016667980000-memory.dmp
memory/1496-109-0x0000016667A80000-0x0000016667A90000-memory.dmp
memory/1496-108-0x00000166679C0000-0x00000166679D0000-memory.dmp
memory/1496-112-0x0000016667A90000-0x0000016667AA0000-memory.dmp
memory/1496-111-0x00000166679D0000-0x00000166679E0000-memory.dmp
memory/1496-113-0x00000166669D0000-0x00000166669D1000-memory.dmp
memory/1496-115-0x00000166679E0000-0x00000166679F0000-memory.dmp
memory/1496-116-0x00000166679F0000-0x0000016667A00000-memory.dmp
memory/1496-118-0x0000016667A00000-0x0000016667A10000-memory.dmp
memory/1496-119-0x0000016667A10000-0x0000016667A20000-memory.dmp
memory/1496-120-0x0000016667A30000-0x0000016667A40000-memory.dmp
memory/1496-123-0x0000016667AA0000-0x0000016667AB0000-memory.dmp
memory/1496-122-0x0000016667A40000-0x0000016667A50000-memory.dmp
memory/1496-124-0x00000166669D0000-0x00000166669D1000-memory.dmp
memory/1496-125-0x0000016667A50000-0x0000016667A60000-memory.dmp
memory/1496-126-0x0000016667A60000-0x0000016667A70000-memory.dmp
memory/1496-127-0x0000016667A70000-0x0000016667A80000-memory.dmp
memory/1496-130-0x0000016667AB0000-0x0000016667AC0000-memory.dmp
memory/1496-129-0x0000016667A80000-0x0000016667A90000-memory.dmp
memory/1496-131-0x00000166669D0000-0x00000166669D1000-memory.dmp
memory/1496-132-0x0000016667A90000-0x0000016667AA0000-memory.dmp
memory/1496-133-0x0000016667AA0000-0x0000016667AB0000-memory.dmp
memory/1496-135-0x0000016667AC0000-0x0000016667AD0000-memory.dmp
memory/1496-136-0x0000016667AB0000-0x0000016667AC0000-memory.dmp
memory/1496-139-0x0000016667AD0000-0x0000016667AE0000-memory.dmp
memory/1496-141-0x0000016667AC0000-0x0000016667AD0000-memory.dmp
memory/1496-144-0x0000016667AE0000-0x0000016667AF0000-memory.dmp
memory/1496-147-0x0000016667AD0000-0x0000016667AE0000-memory.dmp
memory/1496-150-0x0000016667AF0000-0x0000016667B00000-memory.dmp
memory/1496-152-0x0000016667AE0000-0x0000016667AF0000-memory.dmp
memory/1496-155-0x0000016667AF0000-0x0000016667B00000-memory.dmp
memory/1496-157-0x0000016667B00000-0x0000016667B10000-memory.dmp
memory/1496-161-0x0000016667B10000-0x0000016667B20000-memory.dmp
memory/1496-163-0x0000016667B00000-0x0000016667B10000-memory.dmp
memory/1496-164-0x0000016667B10000-0x0000016667B20000-memory.dmp
memory/1496-166-0x0000016667B20000-0x0000016667B30000-memory.dmp
memory/1496-168-0x0000016667B20000-0x0000016667B30000-memory.dmp
memory/1496-171-0x0000016667B30000-0x0000016667B40000-memory.dmp
memory/1496-176-0x0000016667B30000-0x0000016667B40000-memory.dmp
memory/1496-180-0x0000016667B40000-0x0000016667B50000-memory.dmp
memory/1496-184-0x0000016667B50000-0x0000016667B60000-memory.dmp
memory/1496-186-0x0000016667B60000-0x0000016667B70000-memory.dmp
memory/1496-185-0x0000016667B70000-0x0000016667B80000-memory.dmp
memory/1496-189-0x0000016667B80000-0x0000016667B90000-memory.dmp
memory/1496-191-0x0000016667B40000-0x0000016667B50000-memory.dmp
memory/1496-193-0x0000016667B70000-0x0000016667B80000-memory.dmp
memory/1496-195-0x0000016667B80000-0x0000016667B90000-memory.dmp
memory/1496-196-0x0000016667B90000-0x0000016667BA0000-memory.dmp
memory/1496-200-0x0000016667B90000-0x0000016667BA0000-memory.dmp
memory/1496-204-0x0000016667BA0000-0x0000016667BB0000-memory.dmp