Analysis
- max time kernel
148s - max time network
152s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
16/09/2026, 12:35
General
- Target remittance advice.jar
- Size 169KB
- Sample260916-psfbksbm2s
- SHA256 5f54ada09af59a9ffa6d528a02968ead5f1b75743cb11e4c208cbaa4f4fda72a
Malware Config
Signatures
- Adds Run key to start application 2 TTPs 2 IoCs
- Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -jar "C:\Users\Admin\AppData\Local\Temp\remittance advice.jar"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Java\jre-1.8\bin\java.exe"C:\Program Files\Java\jre-1.8\bin\java.exe" -jar C:\Users\Admin\.5490728727250731154.jar2⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SYSTEM32\reg.exereg add HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /f /v J188ba466e70:U41646d696e_s /t REG_SZ /d "\"C:\Program Files\Java\jre-1.8\bin\javaw.exe\" -jar \"C:\Users\Admin\.5490728727250731154.jar\""3⤵
- Adds Run key to start application
-
-
-
C:\Program Files\Java\jre-1.8\bin\javaw.exe"C:\Program Files\Java\jre-1.8\bin\javaw.exe" -jar "C:\Users\Admin\.5490728727250731154.jar"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SYSTEM32\reg.exereg add HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /f /v J188ba466e70:U41646d696e_s /t REG_SZ /d "\"C:\Program Files\Java\jre-1.8\bin\javaw.exe\" -jar \"C:\Users\Admin\.5490728727250731154.jar\""2⤵
- Adds Run key to start application
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
.5490728727250731154.jar
9q8mj68uvb2f0h90fr2bcbmtq77a1mc4f6s7379opc3irsth0mo
9q8mj68uvb2f0h90fr2bcbmtq77a1mc4f6s7379opc3irsth0mo
9q8mj68uvb2f0h90fr2bcbmtq77a1mc4f6s7379opc3irsth0mo
memory/2784-35-0x000002A9002A0000-0x000002A9002B0000-memory.dmp
memory/2784-33-0x000002A900280000-0x000002A900290000-memory.dmp
memory/2784-25-0x000002A9002D0000-0x000002A9002E0000-memory.dmp
memory/2784-24-0x000002A9002C0000-0x000002A9002D0000-memory.dmp
memory/2784-29-0x000002A97CF20000-0x000002A97CF21000-memory.dmp
memory/2784-37-0x000002A9002C0000-0x000002A9002D0000-memory.dmp
memory/2784-40-0x000002A9002D0000-0x000002A9002E0000-memory.dmp
memory/2784-11-0x000002A97CF20000-0x000002A97CF21000-memory.dmp
memory/2784-36-0x000002A9002B0000-0x000002A9002C0000-memory.dmp
memory/2784-13-0x000002A900270000-0x000002A900280000-memory.dmp
memory/2784-34-0x000002A900290000-0x000002A9002A0000-memory.dmp
memory/2784-21-0x000002A9002B0000-0x000002A9002C0000-memory.dmp
memory/2784-19-0x000002A9002A0000-0x000002A9002B0000-memory.dmp
memory/2784-32-0x000002A900270000-0x000002A900280000-memory.dmp
memory/2784-17-0x000002A900290000-0x000002A9002A0000-memory.dmp
memory/2784-31-0x000002A900000000-0x000002A900270000-memory.dmp
memory/2784-2-0x000002A900000000-0x000002A900270000-memory.dmp
memory/2784-15-0x000002A900280000-0x000002A900290000-memory.dmp
memory/3016-120-0x0000021E06FC0000-0x0000021E06FC1000-memory.dmp
memory/3016-131-0x0000021E08A70000-0x0000021E08CE0000-memory.dmp
memory/3016-76-0x0000021E08A70000-0x0000021E08CE0000-memory.dmp
memory/3016-94-0x0000021E06FC0000-0x0000021E06FC1000-memory.dmp
memory/3016-191-0x0000021E06FC0000-0x0000021E06FC1000-memory.dmp
memory/4852-60-0x000001AE60EE0000-0x000001AE60EF0000-memory.dmp
memory/4852-63-0x000001AE5F300000-0x000001AE5F301000-memory.dmp
memory/4852-86-0x000001AE5F300000-0x000001AE5F301000-memory.dmp
memory/4852-66-0x000001AE60F00000-0x000001AE60F10000-memory.dmp
memory/4852-62-0x000001AE60EF0000-0x000001AE60F00000-memory.dmp
memory/4852-59-0x000001AE60ED0000-0x000001AE60EE0000-memory.dmp
memory/4852-102-0x000001AE60F10000-0x000001AE60F20000-memory.dmp
memory/4852-101-0x000001AE60C30000-0x000001AE60EA0000-memory.dmp
memory/4852-110-0x000001AE60F00000-0x000001AE60F10000-memory.dmp
memory/4852-109-0x000001AE60EF0000-0x000001AE60F00000-memory.dmp
memory/4852-108-0x000001AE60EE0000-0x000001AE60EF0000-memory.dmp
memory/4852-56-0x000001AE60EC0000-0x000001AE60ED0000-memory.dmp
memory/4852-107-0x000001AE60ED0000-0x000001AE60EE0000-memory.dmp
memory/4852-106-0x000001AE60EC0000-0x000001AE60ED0000-memory.dmp
memory/4852-105-0x000001AE60EB0000-0x000001AE60EC0000-memory.dmp
memory/4852-104-0x000001AE60EA0000-0x000001AE60EB0000-memory.dmp
memory/4852-103-0x000001AE60C30000-0x000001AE60EA0000-memory.dmp
memory/4852-54-0x000001AE60EB0000-0x000001AE60EC0000-memory.dmp
memory/4852-52-0x000001AE60EA0000-0x000001AE60EB0000-memory.dmp
memory/4852-41-0x000001AE60C30000-0x000001AE60EA0000-memory.dmp