Analysis
- max time kernel
150s - max time network
153s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/09/2026, 00:31
General
- Target JDownloader2Setup_windows-amd64_v25_0_4_1.exe
- Size 77.3MB
- Sample260910-avfb2avwgx
- SHA256 fdb3dee056e0a5e3ee2a06407bcced508e26dacda4e6c328749adc451a5dc956
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
- Loads dropped DLL 26 IoCs
- Checks processor information in registry 2 TTPs 4 IoCs
Processor information is often read in order to detect sandboxing environments.
- Suspicious use of SetWindowsHookEx 2 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\JDownloader2Setup_windows-amd64_v25_0_4_1.exe"C:\Users\Admin\AppData\Local\Temp\JDownloader2Setup_windows-amd64_v25_0_4_1.exe"1⤵
- Loads dropped DLL
- Checks processor information in registry
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
\??\c:\users\admin\appdata\local\INSTAL~1\t\E4J248~1.TMP\jre\bin\java.exe"c:\users\admin\appdata\local\INSTAL~1\t\E4J248~1.TMP\jre\bin\java.exe" -version2⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks processor information in registry
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
flatlaf-windows-x86_64.dll
awt.dll
fontmanager.dll
freetype.dll
java.exe
jawt.dll
management.dll
management_ext.dll
net.dll
nio.dll
prefs.dll
verify.dll
zip.dll
ADDITIONAL_LICENSE_INFO
ASSEMBLY_EXCEPTION
LICENSE
VCRUNTIME140.dll
java.dll
jimage.dll
jli.dll
msvcp140.dll
jvm.dll
vcruntime140_1.dll
jvm.cfg
memory/2804-486-0x000001C29A790000-0x000001C29AA00000-memory.dmp
memory/2804-485-0x000001C292CC0000-0x000001C292F30000-memory.dmp
memory/2804-484-0x000001C29A200000-0x000001C29A470000-memory.dmp
memory/2804-481-0x000001C29A790000-0x000001C29AA00000-memory.dmp
memory/2804-480-0x000001C292CC0000-0x000001C292F30000-memory.dmp
memory/2804-471-0x000001C29A200000-0x000001C29A470000-memory.dmp
memory/6012-599-0x000002A4D6FC0000-0x000002A4D70CC000-memory.dmp
memory/6012-598-0x000002A4D0ED0000-0x000002A4D0FCC000-memory.dmp
memory/6012-498-0x000002A4C1A80000-0x000002A4C1CF0000-memory.dmp
memory/6012-509-0x000002A4C2010000-0x000002A4C2280000-memory.dmp
memory/6012-507-0x000002A4BA540000-0x000002A4BA7B0000-memory.dmp
memory/6012-654-0x000002A4C1A80000-0x000002A4C1CF0000-memory.dmp
memory/6012-655-0x000002A4BA540000-0x000002A4BA7B0000-memory.dmp
memory/6012-656-0x000002A4C2010000-0x000002A4C2280000-memory.dmp
memory/6012-657-0x000002A4D0ED0000-0x000002A4D0FCC000-memory.dmp
memory/6012-658-0x000002A4D6FC0000-0x000002A4D70CC000-memory.dmp
memory/6012-683-0x000002A4D6FC0000-0x000002A4D70CC000-memory.dmp