Analysis

  • max time kernel
    148s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    03/10/2026, 15:24

General

  • Target
    elcan 3.jar
  • Size 20.8MB
  • Sample261003-ste9ratsdv
  • SHA256 2d3e5dff2ceb3e9bf577b3d88c1a608b89e6a4a494efdbf2178dd5a8333f1e33
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 5 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
    java -jar "C:\Users\Admin\AppData\Local\Temp\elcan 3.jar"
    1⤵
    • Loads dropped DLL
    • Suspicious use of SetWindowsHookEx
    PID:2400

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        gdx64.dll

        • Path C:\Users\Admin\AppData\Local\Temp\libgdxAdmin\e1cd32f8\gdx64.dll
        • Size 140KB
        • SHA256 531d4200b8ddce14b71d95dfadaa7389dd40cf0cb15a5cbc527cf5e8ca5f2ed6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        OpenAL.dll

        • Path C:\Users\Admin\AppData\Local\Temp\lwjglAdmin\3.2.3-1.2.0-diagnostics-3\OpenAL.dll
        • Size 1.0MB
        • SHA256 743f12e463b2eb387390f9e8a04b4ea3b85cf121a59402b0c3c01f0579e70c65
        • MD5 SHA1 SHA512 SSDEEP TLSH

        glfw.dll

        • Path C:\Users\Admin\AppData\Local\Temp\lwjglAdmin\3.2.3-1.2.0-diagnostics-3\glfw.dll
        • Size 354KB
        • SHA256 45802fd4c61c5ec5a3b555441028538c27259e9ad736109fbabe533de128dfb1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jemalloc.dll

        • Path C:\Users\Admin\AppData\Local\Temp\lwjglAdmin\3.2.3-1.2.0-diagnostics-3\jemalloc.dll
        • Size 253KB
        • SHA256 ef2a36221cd84aa85fbfac3972ad46dc10af21a491cedd0b4d1fbc4e58d80771
        • MD5 SHA1 SHA512 SSDEEP TLSH

        lwjgl.dll

        • Path C:\Users\Admin\AppData\Local\Temp\lwjglAdmin\3.2.3-1.2.0-diagnostics-3\lwjgl.dll
        • Size 379KB
        • SHA256 3fb6bfc26bf0a11417560bde28eed62f4a1a5a162f64b424d106a11a31a2e82b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/2400-2-0x000001AA02740000-0x000001AA029B0000-memory.dmp

        memory/2400-13-0x000001AA02640000-0x000001AA02641000-memory.dmp

        memory/2400-45-0x000001AA02700000-0x000001AA02701000-memory.dmp

        memory/2400-50-0x000001AA02640000-0x000001AA02641000-memory.dmp

        memory/2400-52-0x000001AA029B0000-0x000001AA029C0000-memory.dmp

        memory/2400-57-0x000001AA02640000-0x000001AA02641000-memory.dmp

        memory/2400-58-0x000000006E700000-0x000000006E72A000-memory.dmp

        memory/2400-60-0x000001AA029B0000-0x000001AA029C0000-memory.dmp

        memory/2400-59-0x000001AA02740000-0x000001AA029B0000-memory.dmp