Analysis
- max time kernel
148s - max time network
126s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
02/10/2026, 23:34
General
- Target Aris External Minecraft Autoclicker.jar
- Size 1.7MB
- Sample261002-3kl12svfpb
- SHA256 28bc26a216bc79957c21b4d0e6134b0b3020f3d0b4d1c1d73e501b5247000871
Malware Config
Signatures
- Loads dropped DLL 1 IoCs
- Drops desktop.ini file(s) 1 IoCs
- Network Service Discovery 1 TTPs 1 IoCs
Attempt to gather information on host's network.
- Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
- Modifies registry class 1 IoCs
- Suspicious use of SetWindowsHookEx 64 IoCs
Processes
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -jar "C:\Users\Admin\AppData\Local\Temp\Aris External Minecraft Autoclicker.jar"1⤵
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
-
C:\Windows\System32\GameBarPresenceWriter.exe"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer1⤵
- Network Service Discovery
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService1⤵
- Drops desktop.ini file(s)
- Checks processor information in registry
- Modifies registry class
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
JNativeHook-2.0.2.dll
desktop.ini
memory/4704-47-0x0000000065E40000-0x0000000065E55000-memory.dmp
memory/4704-48-0x0000000065E40000-0x0000000065E55000-memory.dmp
memory/4704-25-0x000001C5856B0000-0x000001C5856B1000-memory.dmp
memory/4704-38-0x000001C5856B0000-0x000001C5856B1000-memory.dmp
memory/4704-41-0x0000000065E40000-0x0000000065E55000-memory.dmp
memory/4704-42-0x000001C5856F0000-0x000001C585960000-memory.dmp
memory/4704-44-0x0000000065E40000-0x0000000065E55000-memory.dmp
memory/4704-45-0x0000000065E40000-0x0000000065E55000-memory.dmp
memory/4704-2-0x000001C5856F0000-0x000001C585960000-memory.dmp
memory/4704-29-0x000001C5856B0000-0x000001C5856B1000-memory.dmp
memory/4704-49-0x0000000065E40000-0x0000000065E55000-memory.dmp
memory/4704-51-0x0000000065E40000-0x0000000065E55000-memory.dmp
memory/4704-52-0x0000000065E40000-0x0000000065E55000-memory.dmp
memory/4704-54-0x0000000065E40000-0x0000000065E55000-memory.dmp
memory/4704-55-0x0000000065E40000-0x0000000065E55000-memory.dmp
memory/4704-56-0x0000000065E40000-0x0000000065E55000-memory.dmp
memory/4704-57-0x0000000065E40000-0x0000000065E55000-memory.dmp
memory/4704-59-0x0000000065E40000-0x0000000065E55000-memory.dmp
memory/4704-62-0x0000000065E40000-0x0000000065E55000-memory.dmp