Analysis

  • max time kernel
    149s
  • max time network
    140s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    30/09/2026, 03:18

General

  • Target
    jc3z3iqq1k.jar
  • Size 3.0MB
  • Sample260930-dtr6zsshng
  • SHA256 bdcb9bd162125d9831878e8494046dfc9411a7625e4ca1772ba91b0f87aaae09
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\jc3z3iqq1k.jar
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:3088

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/3088-2-0x000002F70CC20000-0x000002F70CE90000-memory.dmp

        memory/3088-11-0x000002F70BE70000-0x000002F70BE71000-memory.dmp

        memory/3088-21-0x000002F70BE70000-0x000002F70BE71000-memory.dmp

        memory/3088-23-0x000002F70CE90000-0x000002F70CEA0000-memory.dmp

        memory/3088-26-0x000002F70CEA0000-0x000002F70CEB0000-memory.dmp

        memory/3088-29-0x000002F70CEB0000-0x000002F70CEC0000-memory.dmp

        memory/3088-30-0x000002F70CEC0000-0x000002F70CED0000-memory.dmp

        memory/3088-32-0x000002F70CED0000-0x000002F70CEE0000-memory.dmp

        memory/3088-39-0x000002F70CF00000-0x000002F70CF10000-memory.dmp

        memory/3088-42-0x000002F70CF10000-0x000002F70CF20000-memory.dmp

        memory/3088-41-0x000002F70CC20000-0x000002F70CE90000-memory.dmp

        memory/3088-37-0x000002F70CEF0000-0x000002F70CF00000-memory.dmp

        memory/3088-36-0x000002F70CEE0000-0x000002F70CEF0000-memory.dmp

        memory/3088-46-0x000002F70CF20000-0x000002F70CF30000-memory.dmp

        memory/3088-50-0x000002F70CE90000-0x000002F70CEA0000-memory.dmp

        memory/3088-55-0x000002F70CEA0000-0x000002F70CEB0000-memory.dmp

        memory/3088-54-0x000002F70CF50000-0x000002F70CF60000-memory.dmp

        memory/3088-52-0x000002F70CF40000-0x000002F70CF50000-memory.dmp

        memory/3088-51-0x000002F70CF30000-0x000002F70CF40000-memory.dmp

        memory/3088-57-0x000002F70CF60000-0x000002F70CF70000-memory.dmp

        memory/3088-58-0x000002F70BE70000-0x000002F70BE71000-memory.dmp

        memory/3088-56-0x000002F70CEB0000-0x000002F70CEC0000-memory.dmp

        memory/3088-62-0x000002F70CF70000-0x000002F70CF80000-memory.dmp

        memory/3088-61-0x000002F70CEC0000-0x000002F70CED0000-memory.dmp

        memory/3088-67-0x000002F70CF80000-0x000002F70CF90000-memory.dmp

        memory/3088-66-0x000002F70CED0000-0x000002F70CEE0000-memory.dmp

        memory/3088-69-0x000002F70BE70000-0x000002F70BE71000-memory.dmp

        memory/3088-72-0x000002F70CF90000-0x000002F70CFA0000-memory.dmp

        memory/3088-71-0x000002F70CEF0000-0x000002F70CF00000-memory.dmp

        memory/3088-70-0x000002F70CEE0000-0x000002F70CEF0000-memory.dmp

        memory/3088-82-0x000002F70CF00000-0x000002F70CF10000-memory.dmp

        memory/3088-81-0x000002F70CFB0000-0x000002F70CFC0000-memory.dmp

        memory/3088-80-0x000002F70CFA0000-0x000002F70CFB0000-memory.dmp

        memory/3088-86-0x000002F70CFC0000-0x000002F70CFD0000-memory.dmp

        memory/3088-85-0x000002F70CF10000-0x000002F70CF20000-memory.dmp

        memory/3088-92-0x000002F70CF50000-0x000002F70CF60000-memory.dmp

        memory/3088-91-0x000002F70CF40000-0x000002F70CF50000-memory.dmp

        memory/3088-90-0x000002F70CFE0000-0x000002F70CFF0000-memory.dmp

        memory/3088-89-0x000002F70CFD0000-0x000002F70CFE0000-memory.dmp

        memory/3088-88-0x000002F70CF20000-0x000002F70CF30000-memory.dmp

        memory/3088-94-0x000002F70CFF0000-0x000002F70D000000-memory.dmp

        memory/3088-98-0x000002F70D000000-0x000002F70D010000-memory.dmp

        memory/3088-99-0x000002F70C570000-0x000002F70C571000-memory.dmp

        memory/3088-97-0x000002F70CF60000-0x000002F70CF70000-memory.dmp

        memory/3088-111-0x000002F70CF80000-0x000002F70CF90000-memory.dmp

        memory/3088-110-0x000002F70D020000-0x000002F70D030000-memory.dmp

        memory/3088-109-0x000002F70D010000-0x000002F70D020000-memory.dmp

        memory/3088-108-0x000002F70CF70000-0x000002F70CF80000-memory.dmp

        memory/3088-112-0x000002F70BE70000-0x000002F70BE71000-memory.dmp

        memory/3088-113-0x000002F70CF90000-0x000002F70CFA0000-memory.dmp

        memory/3088-116-0x000002F70CFB0000-0x000002F70CFC0000-memory.dmp

        memory/3088-115-0x000002F70CFA0000-0x000002F70CFB0000-memory.dmp

        memory/3088-119-0x000002F70CFC0000-0x000002F70CFD0000-memory.dmp

        memory/3088-120-0x000002F70CFE0000-0x000002F70CFF0000-memory.dmp

        memory/3088-121-0x000002F70D030000-0x000002F70D040000-memory.dmp

        memory/3088-122-0x000002F70BE70000-0x000002F70BE71000-memory.dmp

        memory/3088-123-0x000002F70CFF0000-0x000002F70D000000-memory.dmp

        memory/3088-124-0x000002F70D000000-0x000002F70D010000-memory.dmp

        memory/3088-125-0x000002F70D010000-0x000002F70D020000-memory.dmp

        memory/3088-126-0x000002F70D020000-0x000002F70D030000-memory.dmp

        memory/3088-129-0x000002F70D040000-0x000002F70D050000-memory.dmp

        memory/3088-131-0x000002F70D030000-0x000002F70D040000-memory.dmp

        memory/3088-133-0x000002F70D040000-0x000002F70D050000-memory.dmp

        memory/3088-135-0x000002F70D050000-0x000002F70D060000-memory.dmp

        memory/3088-138-0x000002F70D060000-0x000002F70D070000-memory.dmp

        memory/3088-145-0x000002F70D070000-0x000002F70D080000-memory.dmp

        memory/3088-144-0x000002F70D050000-0x000002F70D060000-memory.dmp

        memory/3088-146-0x000002F70D060000-0x000002F70D070000-memory.dmp

        memory/3088-149-0x000002F70D080000-0x000002F70D090000-memory.dmp

        memory/3088-150-0x000002F70D070000-0x000002F70D080000-memory.dmp

        memory/3088-152-0x000002F70D080000-0x000002F70D090000-memory.dmp

        memory/3088-155-0x000002F70D090000-0x000002F70D0A0000-memory.dmp

        memory/3088-157-0x000002F70D090000-0x000002F70D0A0000-memory.dmp

        memory/3088-159-0x000002F70D0A0000-0x000002F70D0B0000-memory.dmp

        memory/3088-164-0x000002F70D0B0000-0x000002F70D0C0000-memory.dmp

        memory/3088-165-0x000002F70D0A0000-0x000002F70D0B0000-memory.dmp

        memory/3088-167-0x000002F70D0B0000-0x000002F70D0C0000-memory.dmp

        memory/3088-169-0x000002F70BE70000-0x000002F70BE71000-memory.dmp

        memory/3088-172-0x000002F70D0C0000-0x000002F70D0D0000-memory.dmp

        memory/3088-176-0x000002F70D0C0000-0x000002F70D0D0000-memory.dmp

        memory/3088-182-0x000002F70BE70000-0x000002F70BE71000-memory.dmp

        memory/3088-183-0x000002F70D0D0000-0x000002F70D0E0000-memory.dmp

        memory/3088-185-0x000002F70D0E0000-0x000002F70D0F0000-memory.dmp

        memory/3088-187-0x000002F70D0D0000-0x000002F70D0E0000-memory.dmp

        memory/3088-189-0x000002F70D0E0000-0x000002F70D0F0000-memory.dmp