Analysis

  • user interaction
    yes
  • max time kernel
    112s
  • max time network
    98s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    14/10/2026, 15:17

General

  • Target
    Jar axis no reconocidos IAMSA/CWAeuGOV.jar
  • Size 957B
  • Sample261014-sn5mfsey5t
  • SHA256 72e1fa8b273cd9c3853c3f9d09eeb31f59df383232371c24d6006dee4c51d464
  • MD5 SHA1 SHA512 TLSH
Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 12 IoCs
  • Suspicious use of FindShellTrayWindow 35 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 19 IoCs

Processes

  • C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
    java -jar "C:\Users\Admin\AppData\Local\Temp\Jar axis no reconocidos IAMSA\CWAeuGOV.jar"
    1⤵
      PID:4052
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe"
      1⤵
      • Checks processor information in registry
      • Enumerates system info in registry
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of WriteProcessMemory
      PID:5252
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ff84282c728,0x7ff84282c734,0x7ff84282c740
        2⤵
          PID:5576
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1808,i,9908530705742114836,14667891202759408772,262144 --field-trial-handle=2052,i,11083954584549294232,16663220074095978563,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2044 /prefetch:2
          2⤵
            PID:1868
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1656,i,15567745449238029383,12483621475438045154,524288 --field-trial-handle=2052,i,11083954584549294232,16663220074095978563,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2336 /prefetch:3
            2⤵
            • System Time Discovery
            PID:4344
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2432,i,5053564852842129769,9542774558255885995,524288 --field-trial-handle=2052,i,11083954584549294232,16663220074095978563,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2444 /prefetch:8
            2⤵
              PID:4704
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3280,i,14104879129274615064,17313850162559191613,2097152 --field-trial-handle=2052,i,11083954584549294232,16663220074095978563,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3292 /prefetch:1
              2⤵
                PID:224
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3304,i,16796951522728024653,4838644759967478067,2097152 --field-trial-handle=2052,i,11083954584549294232,16663220074095978563,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3324 /prefetch:1
                2⤵
                  PID:2564
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4500,i,9991271592431078093,12556643734015146895,2097152 --field-trial-handle=2052,i,11083954584549294232,16663220074095978563,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4508 /prefetch:2
                  2⤵
                    PID:1092
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4760,i,9677383823101221592,9020211604002680233,2097152 --field-trial-handle=2052,i,11083954584549294232,16663220074095978563,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4776 /prefetch:1
                    2⤵
                      PID:5508
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4920,i,11757652891487552995,13786277253574427592,524288 --field-trial-handle=2052,i,11083954584549294232,16663220074095978563,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3968 /prefetch:8
                      2⤵
                        PID:4540
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5100,i,11120876241513976466,10115222069782033249,524288 --field-trial-handle=2052,i,11083954584549294232,16663220074095978563,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5108 /prefetch:8
                        2⤵
                          PID:5080
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5524,i,14060917637635242904,17938268159898209756,524288 --field-trial-handle=2052,i,11083954584549294232,16663220074095978563,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5528 /prefetch:8
                          2⤵
                            PID:1968
                        • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                          "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                          1⤵
                            PID:4184
                          • C:\Windows\system32\svchost.exe
                            C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                            1⤵
                              PID:3636
                            • C:\Windows\System32\rundll32.exe
                              C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                              1⤵
                                PID:3732

                              Network

                                    MITRE ATT&CK Enterprise v16

                                    Replay Monitor

                                    Loading Replay Monitor...

                                    Downloads

                                    84d4983c-5bf6-40b9-8574-29ddc96610e3.tmp

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\84d4983c-5bf6-40b9-8574-29ddc96610e3.tmp
                                    • Size 267KB
                                    • SHA256 58b7af95fb0a40649a0b7d67966dd40fafe04a715427d3387bf16944f1f3bf63
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    settings.dat

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
                                    • Size 40B
                                    • SHA256 d8069b59ba1cdc110cde92cdc89d02bd5f23941139d79e9234b63999b8afe6ef
                                    • MD5 SHA1 SHA512

                                    183f5be6-2a7f-4722-b301-7a909b4017aa.tmp

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\183f5be6-2a7f-4722-b301-7a909b4017aa.tmp
                                    • Size 6B
                                    • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                    • MD5 SHA1 SHA512

                                    1ecbce79-5ffa-4ec4-801f-2d454f4be753.tmp

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\1ecbce79-5ffa-4ec4-801f-2d454f4be753.tmp
                                    • Size 414B
                                    • SHA256 b807c702dc6284550741a4f0061778414784de4bc38e15350834c7e175335f6e
                                    • MD5 SHA1 SHA512 TLSH

                                    4915a0ab-e275-49e9-8c14-2c14bfe5b78a.tmp

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\4915a0ab-e275-49e9-8c14-2c14bfe5b78a.tmp
                                    • Size 17KB
                                    • SHA256 2402969cd2ec72ea72b513389c43205a9ee2bceca1c456ef576613e3544e19a0
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    9c5caa05-a89b-4fce-ab6c-1f934be49b64.tmp

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\9c5caa05-a89b-4fce-ab6c-1f934be49b64.tmp
                                    • Size 12KB
                                    • SHA256 3a56d94f007527632f479795c5d48f9c65fa52d95bd98799f569db07fe89821e
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    143c6e0f-4007-4833-a969-74ae6d376558.tmp

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\143c6e0f-4007-4833-a969-74ae6d376558.tmp
                                    • Size 523B
                                    • SHA256 f9430d693463cc084ed32874df4b135d9bcd45cc60f590539a166ae54c4a20e0
                                    • MD5 SHA1 SHA512 TLSH

                                    3c678ca6-b291-4159-bd64-371180b746ac.tmp

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\3c678ca6-b291-4159-bd64-371180b746ac.tmp
                                    • Size 2B
                                    • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                    • MD5 SHA1 SHA512

                                    8b92dafb-4287-48b4-8448-8a711abe9ebf.tmp

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\8b92dafb-4287-48b4-8448-8a711abe9ebf.tmp
                                    • Size 1KB
                                    • SHA256 751da194fb00dd1c54eeeaf613de1591f75e0fb4f2fe6493ceff3cb7012b3f80
                                    • MD5 SHA1 SHA512 TLSH

                                    temp-index

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
                                    • Size 120B
                                    • SHA256 e4547a8559456264b5d7ac5cd81cdf09ddfa721f1b0340c919e1ddf67ff4f24f
                                    • MD5 SHA1 SHA512 TLSH

                                    the-real-index

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                    • Size 96B
                                    • SHA256 c43d2951ecd864eefe9d68772c2d44714a3ee8da2614cbd18654feaba453fa11
                                    • MD5 SHA1 SHA512 TLSH

                                    data_1

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\GrShaderCache\data_1
                                    • Size 264KB
                                    • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
                                    • MD5 SHA1 SHA512 SSDEEP

                                    bdd2b977-9b2e-48af-b98b-cd08ebb0e4d1.tmp

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\bdd2b977-9b2e-48af-b98b-cd08ebb0e4d1.tmp
                                    • Size 130KB
                                    • SHA256 82a93ff5343e43092b63f82190b8eace1a0497d4f3212ec2e2518a5589123b05
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    memory/4052-12-0x0000027D10820000-0x0000027D10A90000-memory.dmp

                                    memory/4052-11-0x0000027D0F000000-0x0000027D0F001000-memory.dmp

                                    memory/4052-2-0x0000027D10820000-0x0000027D10A90000-memory.dmp