Analysis

  • max time kernel
    148s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    03/09/2026, 15:58

General

  • Target
    meteor-client-26.2-17.jar
  • Size 4.8MB
  • Sample260903-ter6faac49
  • SHA256 2a8b4beee7cc8402234de09bd6ed2a68ae42c35c88147604ca737000da316530
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\meteor-client-26.2-17.jar
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:6868

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/6868-2-0x00000161CE4B0000-0x00000161CE720000-memory.dmp

        memory/6868-11-0x00000161CCAF0000-0x00000161CCAF1000-memory.dmp

        memory/6868-18-0x00000161CCAF0000-0x00000161CCAF1000-memory.dmp

        memory/6868-24-0x00000161CE720000-0x00000161CE730000-memory.dmp

        memory/6868-27-0x00000161CE730000-0x00000161CE740000-memory.dmp

        memory/6868-29-0x00000161CE4B0000-0x00000161CE720000-memory.dmp

        memory/6868-30-0x00000161CE740000-0x00000161CE750000-memory.dmp

        memory/6868-33-0x00000161CE750000-0x00000161CE760000-memory.dmp

        memory/6868-35-0x00000161CE760000-0x00000161CE770000-memory.dmp

        memory/6868-37-0x00000161CE770000-0x00000161CE780000-memory.dmp

        memory/6868-39-0x00000161E9A40000-0x00000161E9B4C000-memory.dmp

        memory/6868-40-0x00000161CE720000-0x00000161CE730000-memory.dmp

        memory/6868-41-0x00000161CE730000-0x00000161CE740000-memory.dmp

        memory/6868-42-0x00000161CE740000-0x00000161CE750000-memory.dmp

        memory/6868-43-0x00000161CE750000-0x00000161CE760000-memory.dmp

        memory/6868-44-0x00000161CE760000-0x00000161CE770000-memory.dmp

        memory/6868-45-0x00000161CE770000-0x00000161CE780000-memory.dmp

        memory/6868-58-0x00000161E9A40000-0x00000161E9B4C000-memory.dmp