Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
03/10/2026, 15:24
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
elcan 3.jar
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
elcan 3.jar
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target elcan 3.jar
- Size 20.8MB
- Sample261003-ste9ratsdv
- SHA256 2d3e5dff2ceb3e9bf577b3d88c1a608b89e6a4a494efdbf2178dd5a8333f1e33
- MD5 f9ae2d8c82f369944ba9a5a9227610d6
- SHA1 cf5284f203362b86854d0e6a7612c5d68265805e
- SHA512 a140dca9242509f9bac5811e8b52b34446e246882eaf1a04bb515277f65cb2ec10988e6c44856ad0fd3b16f95bdd5a12dc5bee63e187b08701d052cede0a3747
- SSDEEP 393216:tiSmOln2XXbbfp7tC62bH+23pZHYiLNU5KWiPZy6gI88o6N:tqOdubd7tCNbH+epZ46UvB6B88ok
- TLSH T107270213AFAC4D3FF84BD23934871AD3B2AC5C8BE90595258BF005EB4C875A1E755A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 5 IoCs
pid Process 2400 java.exe 2400 java.exe 2400 java.exe 2400 java.exe 2400 java.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2400 java.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\libgdxAdmin\e1cd32f8\gdx64.dll
- Size 140KB
- SHA256 531d4200b8ddce14b71d95dfadaa7389dd40cf0cb15a5cbc527cf5e8ca5f2ed6
- MD5 484fde97a95623c200c7e7146649f29e
- SHA1 37e7cd0158bdd5af9dcf6491a4e28094a0ea2dd7
- SHA512 4e5a5411cbd12614052d0383c853da045572d4a25df1c328b2f60addd0d8eaa1a8f80b6fe1d39c88b6517490990a9c0a26479e91ebb72161a83fa71f3bf923bd
- SSDEEP 3072:tPG8YY3YhOHHoiLaGQUBaPV3QPKVxo63dFVh:tPG85YhOnoimGbOoIdFVh
- TLSH T1FCE36D26F2E394EDC52BC97087DAA773F4307C352221AD6F9650F6712D20F90974A72A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\lwjglAdmin\3.2.3-1.2.0-diagnostics-3\OpenAL.dll
- Size 1.0MB
- SHA256 743f12e463b2eb387390f9e8a04b4ea3b85cf121a59402b0c3c01f0579e70c65
- MD5 8ebfd1b0fd9683650cc3c07a63d73c84
- SHA1 c6d9d6e8bd792ff780aaa1030d2f71f851015d4e
- SHA512 06774cadc439ee67eb7ca93556b77b6a21ec671083f3ce5d1768ab6bbc39734d1151222b296cb9ca5292158414a6e9c1b158cb7d11ff664a07b3bcd35ff724ff
- SSDEEP 24576:Bad/0ZmTwvZTy1ANPbs0ZpuBuAogFpti33JEH:c0ZAcZa06BuAHpti33
- TLSH T1BA25E145B6B244EDE4BB80398553B507F271B44503204EEB57A0AA6A2F77FE05BFB702
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\lwjglAdmin\3.2.3-1.2.0-diagnostics-3\glfw.dll
- Size 354KB
- SHA256 45802fd4c61c5ec5a3b555441028538c27259e9ad736109fbabe533de128dfb1
- MD5 8bea1658fa2c16560e497eb983a7cafc
- SHA1 9ac1898ce643d9f79926b760d408d76d71da7ddf
- SHA512 b377e07f1666da25a4579109a0b9f3f2d7b5796bee1497fbe2e7edab46b7d859f1ba2eb58f9f8f8becd071397d155ff30d6f9d8f82b71769e6d84cbd4b10ce9c
- SSDEEP 3072:1GFI604xkT+MeFBYEL+qarandbZDyuVF70IHSY3d3oRKrSftMDNvj4iwP9buesH1:1GF04xghC+bWlgC700Sm1TJSK
- TLSH T11374F725F7B2055FCA2B4033C6DFB9229477B44C3BD7559F7A5809A83E22FA140A9F24
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\lwjglAdmin\3.2.3-1.2.0-diagnostics-3\jemalloc.dll
- Size 253KB
- SHA256 ef2a36221cd84aa85fbfac3972ad46dc10af21a491cedd0b4d1fbc4e58d80771
- MD5 57d215a813dc4dfa4466da1beee6c503
- SHA1 46bae3601ae95ee3e592d46487435b4843dc80c7
- SHA512 607f9409f163db866429d66c6ef30da3d4413b9aa840488ae5cc210d96570a6aa14881c587f4c5939d6b0f456650cb4ab7d7c9a7f39427e206368b96b3dc6ec4
- SSDEEP 3072:Tb6WOLtGzIGwReTUFZEMUA/3GB4ML8HFkNORXJiG34obttApspUgM1vQyiC+:f8ADwkIFiMUA/3LMIlkuB9EQy
- TLSH T139445B5AB3E60C78CCA78039C9478B06D3F2B9551363EBDF06600A6A5F6B7D0673A750
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\lwjglAdmin\3.2.3-1.2.0-diagnostics-3\lwjgl.dll
- Size 379KB
- SHA256 3fb6bfc26bf0a11417560bde28eed62f4a1a5a162f64b424d106a11a31a2e82b
- MD5 868590743c89949560d3f628749dfbef
- SHA1 49b7fd5542c87a175396e7addd5e9726b5fb37bb
- SHA512 197a3be688d18b7a12794db8a7a29dfdce2ea9a7600b0e425223569c3dd071eb5439139dd3d32996f50ef5bbe83cb00c1e593f7a07bfea194aed08b1bc28f752
- SSDEEP 3072:3+OeoJB/pCAzBKwFBUz7fgHoaHHxT6W6ZQQbM6mhatQlysz1es33UI9yEdEID28w:3+hoJB/fBKw43so05676hMpscnEcj
- TLSH T14D84D835DE12C68CD9FF723960531000E77A78650B1252CB17AA9A9FA61B7F093F2F25
- MD5 SHA1 SHA512 SSDEEP TLSH