Analysis
- user interaction
yes - max time kernel
123s - max time network
120s - platform
windows11-21h2_x64 - resource
win11-20260911-en - resource tags
- submitted
01/10/2026, 18:06
General
- Target Adjust Binary/launch.bat
- Size 115B
- Sample261001-wpthcstfna
- SHA256 0953331a17b714fccb292ac20c402da61c7315a782506df19de0b4cacca85f22
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
- Loads dropped DLL 3 IoCs
- Executes a command shell one-liner 1 TTPs 1 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
- Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
- Checks processor information in registry 2 TTPs 8 IoCs
Processor information is often read in order to detect sandboxing environments.
- Suspicious use of SetWindowsHookEx 1 IoCs
- Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Adjust Binary\launch.bat"1⤵
- Executes a command shell one-liner
- Suspicious use of WriteProcessMemory
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -jar Adjust.jar2⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Roaming\.adjustclient\bin\Adjust.exeC:\Users\Admin\AppData\Roaming\.adjustclient\bin\Adjust.exe -Dnative.encoding=utf8 -Xmx4g -Xms4g -Xmn2g -XX:MaximumHeapSizePercent=50 -XX:MaximumYoungGenerationSizePercent=30 -XX:+CollectYoungGenerationSeparately -XX:MaxHeapFree=3072m -Djava.library.path=C:\Users\Admin\AppData\Roaming\.adjustclient\bin\natives -Dcerberus.port=1655959392 -Dcerberus.secret=16567192233⤵
- Executes dropped EXE
- Loads dropped DLL
- Reads the TCP/IP host and domain name from the registry
- Checks processor information in registry
- Suspicious use of SetWindowsHookEx
-
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
jna2413847609534124674.dll
glfw.dll
lwjgl.dll
83aa4cc77f591dfc2374580bbd95f6ba_412106cb-c5a6-43fe-a7e4-148e36ae7d10
memory/2252-2-0x00000164D4BA0000-0x00000164D4E10000-memory.dmp
memory/2252-11-0x00000164D3350000-0x00000164D3351000-memory.dmp
memory/2252-14-0x00000164D4E10000-0x00000164D4E20000-memory.dmp
memory/2252-15-0x00000164D4E20000-0x00000164D4E30000-memory.dmp
memory/2252-17-0x00000164D4E30000-0x00000164D4E40000-memory.dmp
memory/2252-19-0x00000164D4E40000-0x00000164D4E50000-memory.dmp
memory/2252-21-0x00000164D4E50000-0x00000164D4E60000-memory.dmp
memory/2252-24-0x00000164D4E60000-0x00000164D4E70000-memory.dmp
memory/2252-25-0x00000164D4E70000-0x00000164D4E80000-memory.dmp
memory/2252-27-0x00000164D4E80000-0x00000164D4E90000-memory.dmp
memory/2252-34-0x00000164D4EA0000-0x00000164D4EB0000-memory.dmp
memory/2252-33-0x00000164D4EB0000-0x00000164D4EC0000-memory.dmp
memory/2252-32-0x00000164D4E90000-0x00000164D4EA0000-memory.dmp
memory/2252-40-0x00000164D4E20000-0x00000164D4E30000-memory.dmp
memory/2252-39-0x00000164D4ED0000-0x00000164D4EE0000-memory.dmp
memory/2252-38-0x00000164D4EC0000-0x00000164D4ED0000-memory.dmp
memory/2252-37-0x00000164D4E10000-0x00000164D4E20000-memory.dmp
memory/2252-31-0x00000164D4BA0000-0x00000164D4E10000-memory.dmp
memory/2252-45-0x00000164D4EE0000-0x00000164D4EF0000-memory.dmp
memory/2252-44-0x00000164D4E30000-0x00000164D4E40000-memory.dmp
memory/2252-50-0x00000164D4EF0000-0x00000164D4F00000-memory.dmp
memory/2252-49-0x00000164D4E40000-0x00000164D4E50000-memory.dmp
memory/2252-54-0x00000164D4F00000-0x00000164D4F10000-memory.dmp
memory/2252-53-0x00000164D4E50000-0x00000164D4E60000-memory.dmp
memory/2252-56-0x00000164D4E60000-0x00000164D4E70000-memory.dmp
memory/2252-57-0x00000164D4F10000-0x00000164D4F20000-memory.dmp
memory/2252-61-0x00000164D4F20000-0x00000164D4F30000-memory.dmp
memory/2252-60-0x00000164D4E70000-0x00000164D4E80000-memory.dmp
memory/2252-63-0x00000164D4F30000-0x00000164D4F40000-memory.dmp
memory/2252-62-0x00000164D4E80000-0x00000164D4E90000-memory.dmp
memory/2252-67-0x00000164D4F40000-0x00000164D4F50000-memory.dmp
memory/2252-66-0x00000164D4EB0000-0x00000164D4EC0000-memory.dmp
memory/2252-65-0x00000164D4E90000-0x00000164D4EA0000-memory.dmp
memory/2252-73-0x00000164D4ED0000-0x00000164D4EE0000-memory.dmp
memory/2252-72-0x00000164D4F60000-0x00000164D4F70000-memory.dmp
memory/2252-71-0x00000164D4F50000-0x00000164D4F60000-memory.dmp
memory/2252-70-0x00000164D4EA0000-0x00000164D4EB0000-memory.dmp
memory/2252-75-0x00000164D4F70000-0x00000164D4F80000-memory.dmp
memory/2252-77-0x00000164D3350000-0x00000164D3351000-memory.dmp
memory/2252-79-0x00000164D3350000-0x00000164D3351000-memory.dmp
memory/2252-83-0x00000164D4EE0000-0x00000164D4EF0000-memory.dmp
memory/2252-84-0x00000164D4F80000-0x00000164D4F90000-memory.dmp
memory/2252-86-0x00000164D4EF0000-0x00000164D4F00000-memory.dmp
memory/2252-87-0x00000164D4F90000-0x00000164D4FA0000-memory.dmp
memory/2252-90-0x00000164D4FA0000-0x00000164D4FB0000-memory.dmp
memory/2252-89-0x00000164D4F00000-0x00000164D4F10000-memory.dmp
memory/2252-93-0x00000164D4FB0000-0x00000164D4FC0000-memory.dmp
memory/2252-92-0x00000164D4F10000-0x00000164D4F20000-memory.dmp
memory/2252-96-0x00000164D4FC0000-0x00000164D4FD0000-memory.dmp
memory/2252-95-0x00000164D4F20000-0x00000164D4F30000-memory.dmp
memory/2252-104-0x00000164D4F40000-0x00000164D4F50000-memory.dmp
memory/2252-103-0x00000164D4FE0000-0x00000164D4FF0000-memory.dmp
memory/2252-102-0x00000164D4FD0000-0x00000164D4FE0000-memory.dmp
memory/2252-101-0x00000164D4F30000-0x00000164D4F40000-memory.dmp
memory/2252-123-0x00000164D4F50000-0x00000164D4F60000-memory.dmp
memory/2252-127-0x00000164D5010000-0x00000164D5020000-memory.dmp
memory/2252-126-0x00000164D5000000-0x00000164D5010000-memory.dmp
memory/2252-125-0x00000164D4FF0000-0x00000164D5000000-memory.dmp
memory/2252-133-0x00000164D4F80000-0x00000164D4F90000-memory.dmp
memory/2252-132-0x00000164D5030000-0x00000164D5040000-memory.dmp
memory/2252-131-0x00000164D5020000-0x00000164D5030000-memory.dmp
memory/2252-130-0x00000164D4F70000-0x00000164D4F80000-memory.dmp
memory/2252-124-0x00000164D4F60000-0x00000164D4F70000-memory.dmp
memory/2252-136-0x00000164D5040000-0x00000164D5050000-memory.dmp
memory/2252-135-0x00000164D4F90000-0x00000164D4FA0000-memory.dmp
memory/2252-137-0x00000164D3350000-0x00000164D3351000-memory.dmp
memory/2252-140-0x00000164D5050000-0x00000164D5060000-memory.dmp
memory/2252-139-0x00000164D4FA0000-0x00000164D4FB0000-memory.dmp
memory/2252-143-0x00000164D5060000-0x00000164D5070000-memory.dmp
memory/2252-142-0x00000164D4FB0000-0x00000164D4FC0000-memory.dmp
memory/2252-147-0x00000164D4FC0000-0x00000164D4FD0000-memory.dmp
memory/2252-151-0x00000164D5070000-0x00000164D5080000-memory.dmp
memory/2252-150-0x00000164D4FE0000-0x00000164D4FF0000-memory.dmp
memory/2252-149-0x00000164D4FD0000-0x00000164D4FE0000-memory.dmp
memory/2252-164-0x00000164D5080000-0x00000164D5090000-memory.dmp
memory/2252-165-0x00000164D5000000-0x00000164D5010000-memory.dmp
memory/2252-163-0x00000164D5090000-0x00000164D50A0000-memory.dmp
memory/2252-162-0x00000164D4FF0000-0x00000164D5000000-memory.dmp
memory/2252-168-0x00000164D5010000-0x00000164D5020000-memory.dmp
memory/2252-169-0x00000164D50A0000-0x00000164D50B0000-memory.dmp
memory/2252-171-0x00000164D5020000-0x00000164D5030000-memory.dmp
memory/2252-173-0x00000164D50B0000-0x00000164D50C0000-memory.dmp
memory/2252-172-0x00000164D5030000-0x00000164D5040000-memory.dmp
memory/2252-176-0x00000164D50C0000-0x00000164D50D0000-memory.dmp
memory/2252-180-0x00000164D50D0000-0x00000164D50E0000-memory.dmp
memory/2252-179-0x00000164D5040000-0x00000164D5050000-memory.dmp
memory/2252-182-0x00000164D50E0000-0x00000164D50F0000-memory.dmp
memory/2252-181-0x00000164D5050000-0x00000164D5060000-memory.dmp
memory/2252-188-0x00000164D5060000-0x00000164D5070000-memory.dmp
memory/2252-189-0x00000164D50F0000-0x00000164D5100000-memory.dmp
memory/2252-185-0x00000164D3350000-0x00000164D3351000-memory.dmp
memory/2252-202-0x00000164D3350000-0x00000164D3351000-memory.dmp
memory/2252-203-0x00000164D3350000-0x00000164D3351000-memory.dmp
memory/2252-204-0x00000164D3350000-0x00000164D3351000-memory.dmp
memory/2252-242-0x00000164D3350000-0x00000164D3351000-memory.dmp
memory/2252-260-0x00000164D5070000-0x00000164D5080000-memory.dmp
memory/2252-261-0x00000164D5090000-0x00000164D50A0000-memory.dmp
memory/2252-271-0x00000164D3350000-0x00000164D3351000-memory.dmp
memory/2252-277-0x00000164D3350000-0x00000164D3351000-memory.dmp
memory/2252-278-0x00000164D4EA0000-0x00000164D4EB0000-memory.dmp
memory/2252-279-0x00000164D4E10000-0x00000164D4E20000-memory.dmp
memory/2252-280-0x00000164D4E20000-0x00000164D4E30000-memory.dmp
memory/2252-283-0x00000164D4E50000-0x00000164D4E60000-memory.dmp
memory/2252-285-0x00000164D4E70000-0x00000164D4E80000-memory.dmp
memory/2252-284-0x00000164D4E60000-0x00000164D4E70000-memory.dmp
memory/2252-282-0x00000164D4E40000-0x00000164D4E50000-memory.dmp
memory/2252-281-0x00000164D4E30000-0x00000164D4E40000-memory.dmp