Analysis

  • user interaction
    yes
  • max time kernel
    898s
  • max time network
    472s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    24/10/2026, 10:44

General

  • Target
    Aristois-Free.jar
  • Size 6.6MB
  • Sample261024-ms32jayv9l
  • SHA256 c3b6900f62cdec6b8bedebc6804a75c60b314ff871461ea279de6e592e944223
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\Aristois-Free.jar
    1⤵
    • Loads dropped DLL
    • Suspicious use of SetWindowsHookEx
    PID:2316
  • C:\Windows\System32\rundll32.exe
    C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
    1⤵
      PID:3284
    • C:\Windows\System32\bootim.exe
      "C:\Windows\System32\bootim.exe"
      1⤵
      • Suspicious use of AdjustPrivilegeToken
      PID:4968

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          glfw.dll

          • Path C:\Users\Admin\AppData\Local\Temp\lwjglAdmin\3.3.1-SNAPSHOT\glfw.dll
          • Size 357KB
          • SHA256 f61949c469c54a5f4e5a8e1668255b919ee1237f1e568acf4127dda0abcdc9a8
          • MD5 SHA1 SHA512 SSDEEP TLSH

          lwjgl.dll

          • Path C:\Users\Admin\AppData\Local\Temp\lwjglAdmin\3.3.1-SNAPSHOT\lwjgl.dll
          • Size 446KB
          • SHA256 1cbc8a197aea7eee710735a57a8cae6c0953ad1fe2cb6e17c2e5afebeb93b5ec
          • MD5 SHA1 SHA512 SSDEEP TLSH

          memory/2316-2-0x00000211ADFB0000-0x00000211AE220000-memory.dmp

          memory/2316-12-0x00000211AE220000-0x00000211AE230000-memory.dmp

          memory/2316-13-0x00000211ADF90000-0x00000211ADF91000-memory.dmp

          memory/2316-15-0x00000211AE230000-0x00000211AE240000-memory.dmp

          memory/2316-19-0x00000211AE240000-0x00000211AE250000-memory.dmp

          memory/2316-21-0x00000211AE260000-0x00000211AE270000-memory.dmp

          memory/2316-20-0x00000211AE250000-0x00000211AE260000-memory.dmp

          memory/2316-24-0x00000211AE270000-0x00000211AE280000-memory.dmp

          memory/2316-25-0x00000211AE280000-0x00000211AE290000-memory.dmp

          memory/2316-29-0x00000211AE2A0000-0x00000211AE2B0000-memory.dmp

          memory/2316-30-0x00000211ADFB0000-0x00000211AE220000-memory.dmp

          memory/2316-28-0x00000211AE290000-0x00000211AE2A0000-memory.dmp

          memory/2316-33-0x00000211AE2B0000-0x00000211AE2C0000-memory.dmp

          memory/2316-32-0x00000211AE220000-0x00000211AE230000-memory.dmp

          memory/2316-35-0x00000211AE2C0000-0x00000211AE2D0000-memory.dmp

          memory/2316-38-0x00000211AE2D0000-0x00000211AE2E0000-memory.dmp

          memory/2316-37-0x00000211AE230000-0x00000211AE240000-memory.dmp

          memory/2316-41-0x00000211AE2E0000-0x00000211AE2F0000-memory.dmp

          memory/2316-40-0x00000211AE250000-0x00000211AE260000-memory.dmp

          memory/2316-43-0x00000211AE2F0000-0x00000211AE300000-memory.dmp

          memory/2316-46-0x00000211AE300000-0x00000211AE310000-memory.dmp

          memory/2316-45-0x00000211AE260000-0x00000211AE270000-memory.dmp

          memory/2316-51-0x00000211AE310000-0x00000211AE320000-memory.dmp

          memory/2316-50-0x00000211AE270000-0x00000211AE280000-memory.dmp

          memory/2316-55-0x00000211AE320000-0x00000211AE330000-memory.dmp

          memory/2316-54-0x00000211AE280000-0x00000211AE290000-memory.dmp

          memory/2316-58-0x00000211AE2A0000-0x00000211AE2B0000-memory.dmp

          memory/2316-59-0x00000211AE330000-0x00000211AE340000-memory.dmp

          memory/2316-57-0x00000211AE290000-0x00000211AE2A0000-memory.dmp

          memory/2316-68-0x00000211AE340000-0x00000211AE350000-memory.dmp

          memory/2316-78-0x00000211ADF90000-0x00000211ADF91000-memory.dmp

          memory/2316-80-0x00000211AE220000-0x00000211AE230000-memory.dmp

          memory/2316-96-0x00000211AE340000-0x00000211AE350000-memory.dmp

          memory/2316-95-0x00000211AE330000-0x00000211AE340000-memory.dmp

          memory/2316-94-0x00000211AE320000-0x00000211AE330000-memory.dmp

          memory/2316-93-0x00000211AE310000-0x00000211AE320000-memory.dmp

          memory/2316-92-0x00000211AE300000-0x00000211AE310000-memory.dmp

          memory/2316-91-0x00000211AE2F0000-0x00000211AE300000-memory.dmp

          memory/2316-90-0x00000211AE2E0000-0x00000211AE2F0000-memory.dmp

          memory/2316-89-0x00000211AE2D0000-0x00000211AE2E0000-memory.dmp

          memory/2316-88-0x00000211AE2C0000-0x00000211AE2D0000-memory.dmp

          memory/2316-87-0x00000211AE2B0000-0x00000211AE2C0000-memory.dmp

          memory/2316-86-0x00000211AE280000-0x00000211AE290000-memory.dmp

          memory/2316-85-0x00000211AE270000-0x00000211AE280000-memory.dmp

          memory/2316-84-0x00000211AE260000-0x00000211AE270000-memory.dmp

          memory/2316-83-0x00000211AE250000-0x00000211AE260000-memory.dmp

          memory/2316-82-0x00000211AE240000-0x00000211AE250000-memory.dmp

          memory/2316-81-0x00000211AE230000-0x00000211AE240000-memory.dmp

          memory/2316-79-0x00000211ADFB0000-0x00000211AE220000-memory.dmp