Analysis
- max time kernel
150s - max time network
154s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
16/09/2026, 12:34
General
- Target remittance advice.jar
- Size 169KB
- Sample260916-pr7dnsbl7t
- SHA256 5f54ada09af59a9ffa6d528a02968ead5f1b75743cb11e4c208cbaa4f4fda72a
Malware Config
Signatures
- Adds Run key to start application 2 TTPs 2 IoCs
- Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -jar "C:\Users\Admin\AppData\Local\Temp\remittance advice.jar"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Java\jre-1.8\bin\java.exe"C:\Program Files\Java\jre-1.8\bin\java.exe" -jar C:\Users\Admin\.5490728727250731154.jar2⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SYSTEM32\reg.exereg add HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /f /v J188ba466e70:U41646d696e_s /t REG_SZ /d "\"C:\Program Files\Java\jre-1.8\bin\javaw.exe\" -jar \"C:\Users\Admin\.5490728727250731154.jar\""3⤵
- Adds Run key to start application
-
-
-
C:\Program Files\Java\jre-1.8\bin\javaw.exe"C:\Program Files\Java\jre-1.8\bin\javaw.exe" -jar "C:\Users\Admin\.5490728727250731154.jar"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SYSTEM32\reg.exereg add HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /f /v J188ba466e70:U41646d696e_s /t REG_SZ /d "\"C:\Program Files\Java\jre-1.8\bin\javaw.exe\" -jar \"C:\Users\Admin\.5490728727250731154.jar\""2⤵
- Adds Run key to start application
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
3903daac9bc4a3b7.timestamp
3903daac9bc4a3b7.timestamp
.5490728727250731154.jar
9q8mj68uvb2f0h90fr2bcbmtq77a1mc4f6s7379opc3irsth0mo
9q8mj68uvb2f0h90fr2bcbmtq77a1mc4f6s7379opc3irsth0mo
memory/3856-31-0x000001D338650000-0x000001D338660000-memory.dmp
memory/3856-21-0x000001D338690000-0x000001D3386A0000-memory.dmp
memory/3856-24-0x000001D3386A0000-0x000001D3386B0000-memory.dmp
memory/3856-25-0x000001D3386B0000-0x000001D3386C0000-memory.dmp
memory/3856-29-0x000001D3383B0000-0x000001D3383B1000-memory.dmp
memory/3856-36-0x000001D3386A0000-0x000001D3386B0000-memory.dmp
memory/3856-37-0x000001D3386B0000-0x000001D3386C0000-memory.dmp
memory/3856-15-0x000001D338660000-0x000001D338670000-memory.dmp
memory/3856-35-0x000001D338690000-0x000001D3386A0000-memory.dmp
memory/3856-34-0x000001D338680000-0x000001D338690000-memory.dmp
memory/3856-33-0x000001D338670000-0x000001D338680000-memory.dmp
memory/3856-32-0x000001D338660000-0x000001D338670000-memory.dmp
memory/3856-2-0x000001D3383E0000-0x000001D338650000-memory.dmp
memory/3856-19-0x000001D338680000-0x000001D338690000-memory.dmp
memory/3856-30-0x000001D3383E0000-0x000001D338650000-memory.dmp
memory/3856-13-0x000001D338650000-0x000001D338660000-memory.dmp
memory/3856-11-0x000001D3383B0000-0x000001D3383B1000-memory.dmp
memory/3856-17-0x000001D338670000-0x000001D338680000-memory.dmp
memory/4480-90-0x00000144479D0000-0x00000144479D1000-memory.dmp
memory/4480-192-0x00000144479D0000-0x00000144479D1000-memory.dmp
memory/4480-135-0x0000014449410000-0x0000014449680000-memory.dmp
memory/4480-124-0x00000144479D0000-0x00000144479D1000-memory.dmp
memory/4480-79-0x0000014449410000-0x0000014449680000-memory.dmp
memory/4628-72-0x0000015927550000-0x0000015927560000-memory.dmp
memory/4628-114-0x0000015927550000-0x0000015927560000-memory.dmp
memory/4628-78-0x0000015927270000-0x00000159274E0000-memory.dmp
memory/4628-59-0x0000015927510000-0x0000015927520000-memory.dmp
memory/4628-82-0x0000015927240000-0x0000015927241000-memory.dmp
memory/4628-41-0x0000015927270000-0x00000159274E0000-memory.dmp
memory/4628-55-0x00000159274F0000-0x0000015927500000-memory.dmp
memory/4628-53-0x00000159274E0000-0x00000159274F0000-memory.dmp
memory/4628-51-0x0000015927240000-0x0000015927241000-memory.dmp
memory/4628-106-0x00000159274E0000-0x00000159274F0000-memory.dmp
memory/4628-107-0x0000015927270000-0x00000159274E0000-memory.dmp
memory/4628-66-0x0000015927540000-0x0000015927550000-memory.dmp
memory/4628-113-0x0000015927540000-0x0000015927550000-memory.dmp
memory/4628-63-0x0000015927520000-0x0000015927530000-memory.dmp
memory/4628-111-0x0000015927520000-0x0000015927530000-memory.dmp
memory/4628-110-0x0000015927510000-0x0000015927520000-memory.dmp
memory/4628-109-0x0000015927500000-0x0000015927510000-memory.dmp
memory/4628-108-0x00000159274F0000-0x0000015927500000-memory.dmp
memory/4628-64-0x0000015927530000-0x0000015927540000-memory.dmp
memory/4628-112-0x0000015927530000-0x0000015927540000-memory.dmp
memory/4628-57-0x0000015927500000-0x0000015927510000-memory.dmp