Analysis
- user interaction
yes - max time kernel
149s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
10/09/2026, 00:31
General
- Target JDownloader2Setup_windows-amd64_v25_0_4_1.exe
- Size 77.3MB
- Sample260910-avfb2avwgx
- SHA256 fdb3dee056e0a5e3ee2a06407bcced508e26dacda4e6c328749adc451a5dc956
Malware Config
Signatures
- Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE 1 IoCs
- Loads dropped DLL 25 IoCs
- Checks processor information in registry 2 TTPs 4 IoCs
Processor information is often read in order to detect sandboxing environments.
- Suspicious use of SetWindowsHookEx 2 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\JDownloader2Setup_windows-amd64_v25_0_4_1.exe"C:\Users\Admin\AppData\Local\Temp\JDownloader2Setup_windows-amd64_v25_0_4_1.exe"1⤵
- Checks computer location settings
- Loads dropped DLL
- Checks processor information in registry
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
\??\c:\users\admin\appdata\local\INSTAL~1\t\E4J317~1.TMP\jre\bin\java.exe"c:\users\admin\appdata\local\INSTAL~1\t\E4J317~1.TMP\jre\bin\java.exe" -version2⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks processor information in registry
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
flatlaf-windows-x86_64.dll
awt.dll
fontmanager.dll
freetype.dll
java.dll
java.exe
jawt.dll
jimage.dll
management.dll
management_ext.dll
net.dll
nio.dll
prefs.dll
vcruntime140.dll
verify.dll
zip.dll
ADDITIONAL_LICENSE_INFO
ASSEMBLY_EXCEPTION
LICENSE
jli.dll
msvcp140.dll
jvm.dll
vcruntime140_1.dll
jvm.cfg
memory/3352-627-0x000001C651B10000-0x000001C651B20000-memory.dmp
memory/3352-652-0x000001C651B60000-0x000001C651B70000-memory.dmp
memory/3352-509-0x000001C6592F0000-0x000001C659560000-memory.dmp
memory/3352-498-0x000001C658D60000-0x000001C658FD0000-memory.dmp
memory/3352-733-0x000001C651D20000-0x000001C651D30000-memory.dmp
memory/3352-571-0x000001C651A90000-0x000001C651AA0000-memory.dmp
memory/3352-732-0x000001C651D00000-0x000001C651D10000-memory.dmp
memory/3352-731-0x000001C651CF0000-0x000001C651D00000-memory.dmp
memory/3352-574-0x000001C651AA0000-0x000001C651AB0000-memory.dmp
memory/3352-577-0x000001C651AB0000-0x000001C651AC0000-memory.dmp
memory/3352-578-0x000001C651AC0000-0x000001C651AD0000-memory.dmp
memory/3352-589-0x000001C651AF0000-0x000001C651B00000-memory.dmp
memory/3352-730-0x000001C651CE0000-0x000001C651CF0000-memory.dmp
memory/3352-599-0x000001C651B20000-0x000001C651B30000-memory.dmp
memory/3352-598-0x000001C651B00000-0x000001C651B10000-memory.dmp
memory/3352-597-0x000001C651B10000-0x000001C651B20000-memory.dmp
memory/3352-596-0x000001C651820000-0x000001C651A90000-memory.dmp
memory/3352-590-0x000001C658D60000-0x000001C658FD0000-memory.dmp
memory/3352-588-0x000001C651AE0000-0x000001C651AF0000-memory.dmp
memory/3352-587-0x000001C651AD0000-0x000001C651AE0000-memory.dmp
memory/3352-602-0x000001C651B30000-0x000001C651B40000-memory.dmp
memory/3352-601-0x000001C6592F0000-0x000001C659560000-memory.dmp
memory/3352-606-0x000001C651B50000-0x000001C651B60000-memory.dmp
memory/3352-605-0x000001C651B40000-0x000001C651B50000-memory.dmp
memory/3352-612-0x000001C651AA0000-0x000001C651AB0000-memory.dmp
memory/3352-611-0x000001C651B70000-0x000001C651B80000-memory.dmp
memory/3352-610-0x000001C651B60000-0x000001C651B70000-memory.dmp
memory/3352-609-0x000001C651A90000-0x000001C651AA0000-memory.dmp
memory/3352-616-0x000001C651B80000-0x000001C651B90000-memory.dmp
memory/3352-618-0x000001C651B90000-0x000001C651BA0000-memory.dmp
memory/3352-617-0x000001C651AC0000-0x000001C651AD0000-memory.dmp
memory/3352-615-0x000001C651AB0000-0x000001C651AC0000-memory.dmp
memory/3352-623-0x000001C651BA0000-0x000001C651BB0000-memory.dmp
memory/3352-622-0x000001C651AF0000-0x000001C651B00000-memory.dmp
memory/3352-621-0x000001C651AE0000-0x000001C651AF0000-memory.dmp
memory/3352-620-0x000001C651AD0000-0x000001C651AE0000-memory.dmp
memory/3352-729-0x000001C651CD0000-0x000001C651CE0000-memory.dmp
memory/3352-632-0x000001C651B20000-0x000001C651B30000-memory.dmp
memory/3352-631-0x000001C651B00000-0x000001C651B10000-memory.dmp
memory/3352-630-0x000001C651BD0000-0x000001C651BE0000-memory.dmp
memory/3352-629-0x000001C651BC0000-0x000001C651BD0000-memory.dmp
memory/3352-628-0x000001C651BB0000-0x000001C651BC0000-memory.dmp
memory/3352-638-0x000001C651BE0000-0x000001C651BF0000-memory.dmp
memory/3352-637-0x000001C651B30000-0x000001C651B40000-memory.dmp
memory/3352-645-0x000001C651BF0000-0x000001C651C00000-memory.dmp
memory/3352-644-0x000001C651B50000-0x000001C651B60000-memory.dmp
memory/3352-653-0x000001C651B70000-0x000001C651B80000-memory.dmp
memory/3352-507-0x000001C651820000-0x000001C651A90000-memory.dmp
memory/3352-651-0x000001C651C10000-0x000001C651C20000-memory.dmp
memory/3352-650-0x000001C651C00000-0x000001C651C10000-memory.dmp
memory/3352-643-0x000001C651B40000-0x000001C651B50000-memory.dmp
memory/3352-657-0x000001C651C20000-0x000001C651C30000-memory.dmp
memory/3352-659-0x000001C651C30000-0x000001C651C40000-memory.dmp
memory/3352-658-0x000001C651B80000-0x000001C651B90000-memory.dmp
memory/3352-662-0x000001C651C40000-0x000001C651C50000-memory.dmp
memory/3352-661-0x000001C651B90000-0x000001C651BA0000-memory.dmp
memory/3352-666-0x000001C651C50000-0x000001C651C60000-memory.dmp
memory/3352-665-0x000001C651BA0000-0x000001C651BB0000-memory.dmp
memory/3352-670-0x000001C651BC0000-0x000001C651BD0000-memory.dmp
memory/3352-673-0x000001C651C70000-0x000001C651C80000-memory.dmp
memory/3352-679-0x000001C651BF0000-0x000001C651C00000-memory.dmp
memory/3352-678-0x000001C651C90000-0x000001C651CA0000-memory.dmp
memory/3352-677-0x000001C651C80000-0x000001C651C90000-memory.dmp
memory/3352-676-0x000001C651BE0000-0x000001C651BF0000-memory.dmp
memory/3352-672-0x000001C651C60000-0x000001C651C70000-memory.dmp
memory/3352-671-0x000001C651BD0000-0x000001C651BE0000-memory.dmp
memory/3352-669-0x000001C651BB0000-0x000001C651BC0000-memory.dmp
memory/3352-682-0x000001C651C00000-0x000001C651C10000-memory.dmp
memory/3352-684-0x000001C651CA0000-0x000001C651CB0000-memory.dmp
memory/3352-683-0x000001C651C10000-0x000001C651C20000-memory.dmp
memory/3352-691-0x000001C651C20000-0x000001C651C30000-memory.dmp
memory/3352-690-0x000001C651CC0000-0x000001C651CD0000-memory.dmp
memory/3352-689-0x000001C651CB0000-0x000001C651CC0000-memory.dmp
memory/3352-700-0x000001C651CD0000-0x000001C651CE0000-memory.dmp
memory/3352-696-0x000001C651C30000-0x000001C651C40000-memory.dmp
memory/3352-705-0x000001C651CE0000-0x000001C651CF0000-memory.dmp
memory/3352-704-0x000001C651C40000-0x000001C651C50000-memory.dmp
memory/3352-728-0x000001C651CC0000-0x000001C651CD0000-memory.dmp
memory/3352-710-0x000001C651CF0000-0x000001C651D00000-memory.dmp
memory/3352-709-0x000001C651C50000-0x000001C651C60000-memory.dmp
memory/3352-714-0x000001C651D00000-0x000001C651D10000-memory.dmp
memory/3352-713-0x000001C651C70000-0x000001C651C80000-memory.dmp
memory/3352-712-0x000001C651C60000-0x000001C651C70000-memory.dmp
memory/3352-724-0x000001C651D30000-0x000001C651D40000-memory.dmp
memory/3352-723-0x000001C651C90000-0x000001C651CA0000-memory.dmp
memory/3352-722-0x000001C651C80000-0x000001C651C90000-memory.dmp
memory/3352-721-0x000001C651D20000-0x000001C651D30000-memory.dmp
memory/3352-720-0x000001C651D10000-0x000001C651D20000-memory.dmp
memory/3352-726-0x000001C651CA0000-0x000001C651CB0000-memory.dmp
memory/3352-727-0x000001C651CB0000-0x000001C651CC0000-memory.dmp
memory/4748-471-0x00000170DEA00000-0x00000170DEC70000-memory.dmp
memory/4748-481-0x00000170DEF90000-0x00000170DF200000-memory.dmp
memory/4748-480-0x00000170D74C0000-0x00000170D7730000-memory.dmp
memory/4748-484-0x00000170DEA00000-0x00000170DEC70000-memory.dmp
memory/4748-486-0x00000170D74C0000-0x00000170D7730000-memory.dmp
memory/4748-485-0x00000170DEF90000-0x00000170DF200000-memory.dmp