Analysis
- max time kernel
149s - max time network
135s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
08/09/2026, 12:25
General
- Target jdk_path_config.exe
- Size 101KB
- Sample260908-pl2agay1ew
- SHA256 8d5c6a27bb1494f0d1cf354557ddde9eeecbe97b4e39e7d0d351d248e4306475
Malware Config
Signatures
- Downloads MZ/PE file 1 IoCs
- Drops file in Windows directory 1 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jdk_path_config.exe"C:\Users\Admin\AppData\Local\Temp\jdk_path_config.exe"1⤵
- Downloads MZ/PE file
- Drops file in Windows directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
SciTools.data
ByteLock2.data
memory/4300-4-0x0000000001890000-0x000000000189E000-memory.dmp
memory/4300-1-0x00000000018D0000-0x00000000018E0000-memory.dmp
memory/4300-0-0x0000000000F90000-0x0000000000FA2000-memory.dmp
memory/4300-6-0x00000000018B0000-0x00000000018BC000-memory.dmp
memory/4300-9-0x00000000018C0000-0x00000000018CE000-memory.dmp
memory/4300-16-0x0000000001900000-0x0000000001908000-memory.dmp
memory/4300-2-0x0000000001850000-0x000000000185E000-memory.dmp
memory/4300-3-0x0000000001870000-0x0000000001882000-memory.dmp
memory/4300-26-0x000000001C9C0000-0x000000001C9DA000-memory.dmp
memory/4300-27-0x00000000018D0000-0x00000000018E0000-memory.dmp
memory/4300-39-0x000000001C8E0000-0x000000001C8FA000-memory.dmp
memory/4300-43-0x00000000018D0000-0x00000000018E0000-memory.dmp
memory/4300-42-0x000000001BC30000-0x000000001BD32000-memory.dmp
memory/4300-44-0x00000000018D0000-0x00000000018E0000-memory.dmp