Analysis

  • max time kernel
    151s
  • max time network
    130s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    10/09/2026, 19:20

General

  • Target
    MavenInjector.exe
  • Size 38.1MB
  • Sample260910-x2arfsvcre
  • SHA256 79f9c264488b17a07011a0bcc2ea14045f1ef365914468d0d35ba2e68a51d34f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 15 IoCs
  • Enumerates connected drives 3 TTPs 1 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\MavenInjector.exe
    "C:\Users\Admin\AppData\Local\Temp\MavenInjector.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:832
    • C:\Users\Admin\AppData\Local\Temp\maveninjector_7d9dc2c1\runtime\bin\javaw.exe
      "C:\Users\Admin\AppData\Local\Temp\maveninjector_7d9dc2c1\runtime\bin\javaw.exe" --add-modules jdk.attach -jar C:\Users\Admin\AppData\Local\Temp\maveninjector_7d9dc2c1\app\MavenInjector-0.4.jar
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Enumerates connected drives
      • Checks processor information in registry
      • Suspicious use of SetWindowsHookEx
      PID:3532

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        MavenInjector-0.4.jar

        • Path C:\Users\Admin\AppData\Local\Temp\maveninjector_7d9dc2c1\app\MavenInjector-0.4.jar
        • Size 6.4MB
        • SHA256 dc0586dd811d2ea94234d937d5d9551513843e28e2c3c8acccd6912d26c971bf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        VCRUNTIME140.dll

        • Path C:\Users\Admin\AppData\Local\Temp\maveninjector_7d9dc2c1\runtime\bin\VCRUNTIME140.dll
        • Size 106KB
        • SHA256 69320f278d90efaaeb67e2a1b55e5b0543883125834c812c8d9c39676e0494fc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        awt.dll

        • Path C:\Users\Admin\AppData\Local\Temp\maveninjector_7d9dc2c1\runtime\bin\awt.dll
        • Size 1.4MB
        • SHA256 18460a825d22ebf420e7a2d1458fdb6b39b58c7fc8c928a15a9209123c2d5054
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fontmanager.dll

        • Path C:\Users\Admin\AppData\Local\Temp\maveninjector_7d9dc2c1\runtime\bin\fontmanager.dll
        • Size 943KB
        • SHA256 c3f2c9bbb21a9876322bbfa94078be47f1cc37c1932a431c94ff6c6807a1f89f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        freetype.dll

        • Path C:\Users\Admin\AppData\Local\Temp\maveninjector_7d9dc2c1\runtime\bin\freetype.dll
        • Size 532KB
        • SHA256 27d6cbfb47f9adaafc90dab4651251c1b7d4e0b1d3caf6984e4828dd27248c67
        • MD5 SHA1 SHA512 SSDEEP TLSH

        java.dll

        • Path C:\Users\Admin\AppData\Local\Temp\maveninjector_7d9dc2c1\runtime\bin\java.dll
        • Size 118KB
        • SHA256 4d948daf1b3be2c71d97d0bcc2610d6d10737269c9801d0f6647922627a4da6b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        javaw.exe

        • Path C:\Users\Admin\AppData\Local\Temp\maveninjector_7d9dc2c1\runtime\bin\javaw.exe
        • Size 53KB
        • SHA256 263a1907273232d32b085d8c93a885dbc8a3616d39b79eb29f10fe0ce7975e9e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jimage.dll

        • Path C:\Users\Admin\AppData\Local\Temp\maveninjector_7d9dc2c1\runtime\bin\jimage.dll
        • Size 32KB
        • SHA256 b9d5e1e13c04126743eac0d46946d8eacd7f690473ec07234e061a5d226f9346
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jli.dll

        • Path C:\Users\Admin\AppData\Local\Temp\maveninjector_7d9dc2c1\runtime\bin\jli.dll
        • Size 89KB
        • SHA256 33b86e462d579a01e8304bf1d1b0503c8fbe84a0f0eb25cc50f5150c65de495b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        management.dll

        • Path C:\Users\Admin\AppData\Local\Temp\maveninjector_7d9dc2c1\runtime\bin\management.dll
        • Size 28KB
        • SHA256 4492076440772c01fbde053af434c5e2227b189cb8e6100611b1f9674cbf9ead
        • MD5 SHA1 SHA512 SSDEEP TLSH

        msvcp140.dll

        • Path C:\Users\Admin\AppData\Local\Temp\maveninjector_7d9dc2c1\runtime\bin\msvcp140.dll
        • Size 564KB
        • SHA256 74892d9b4028c05debaf0b9b5d9dc6d22f7956fa7d7eee00c681318c26792823
        • MD5 SHA1 SHA512 SSDEEP TLSH

        net.dll

        • Path C:\Users\Admin\AppData\Local\Temp\maveninjector_7d9dc2c1\runtime\bin\net.dll
        • Size 58KB
        • SHA256 2caa2027a660d2434939124e546db485bbe5f9d376d4fdd3a2faf860a656e6a2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nio.dll

        • Path C:\Users\Admin\AppData\Local\Temp\maveninjector_7d9dc2c1\runtime\bin\nio.dll
        • Size 78KB
        • SHA256 c80eade1032d51e85e4298bce500607075f2d570492a763f7dba4cfdb1322cc0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jvm.dll

        • Path C:\Users\Admin\AppData\Local\Temp\maveninjector_7d9dc2c1\runtime\bin\server\jvm.dll
        • Size 12.8MB
        • SHA256 d7111507268cba181af4d25565a664d54c5b53cff47f73e483744f706d9505ee
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vcruntime140_1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\maveninjector_7d9dc2c1\runtime\bin\vcruntime140_1.dll
        • Size 48KB
        • SHA256 6fd366a691ed68430bcd0a3de3d8d19a0cb2102952bfc140bbef4354ed082c47
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zip.dll

        • Path C:\Users\Admin\AppData\Local\Temp\maveninjector_7d9dc2c1\runtime\bin\zip.dll
        • Size 87KB
        • SHA256 fc87e553ea3ad1ac14c9538d623876674fd109d40c43ebbc7a9b01f4864c3971
        • MD5 SHA1 SHA512 SSDEEP TLSH

        java.security

        • Path C:\Users\Admin\AppData\Local\Temp\maveninjector_7d9dc2c1\runtime\conf\security\java.security
        • Size 65KB
        • SHA256 c34c3504e41af63639661aedf8d0864d8157df0980dc4c22d014a7170c5897e1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        COPYRIGHT

        • Path C:\Users\Admin\AppData\Local\Temp\maveninjector_7d9dc2c1\runtime\legal\java.instrument\COPYRIGHT
        • Size 35B
        • SHA256 7afb3a2dc57cb16223dddc970e0b464311e5311484c793abf9327a19ef629018
        • MD5 SHA1 SHA512

        LICENSE

        • Path C:\Users\Admin\AppData\Local\Temp\maveninjector_7d9dc2c1\runtime\legal\java.instrument\LICENSE
        • Size 33B
        • SHA256 86e0516b888276a492b19f9a84f5a866ed36925fae1510b3a94a0b6213e69192
        • MD5 SHA1 SHA512

        fontconfig.bfc

        • Path C:\Users\Admin\AppData\Local\Temp\maveninjector_7d9dc2c1\runtime\lib\fontconfig.bfc
        • Size 4KB
        • SHA256 c7e2e76b908cb6330823e698889943c162e9861a4575501cbb59c9b830158ab0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jvm.cfg

        • Path C:\Users\Admin\AppData\Local\Temp\maveninjector_7d9dc2c1\runtime\lib\jvm.cfg
        • Size 29B
        • SHA256 aa9efb969444c1484e29adecab55a122458090616e766b2f1230ef05bc3867e0
        • MD5 SHA1 SHA512

        modules

        • Path C:\Users\Admin\AppData\Local\Temp\maveninjector_7d9dc2c1\runtime\lib\modules
        • Size 24.4MB
        • SHA256 212c75d5dca2626a6bc75171041a77a21ef1c5a677d9280ed86d67ae5bd86f0a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/3532-351-0x0000025E62E20000-0x0000025E63090000-memory.dmp

        memory/3532-363-0x0000025E633B0000-0x0000025E63620000-memory.dmp

        memory/3532-362-0x0000025E5B8F0000-0x0000025E5BB60000-memory.dmp

        memory/3532-386-0x0000025E62E20000-0x0000025E63090000-memory.dmp

        memory/3532-387-0x0000025E5B8F0000-0x0000025E5BB60000-memory.dmp

        memory/3532-388-0x0000025E633B0000-0x0000025E63620000-memory.dmp