Analysis
- max time kernel
14s - max time network
7s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
24/10/2026, 17:07
General
- Target euqrfm.jar
- Size 3.0MB
- Sample261024-vm3gtavzhs
- SHA256 bdcb9bd162125d9831878e8494046dfc9411a7625e4ca1772ba91b0f87aaae09
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 12 IoCs
- Suspicious use of AdjustPrivilegeToken 64 IoCs
- Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -jar C:\Users\Admin\AppData\Local\Temp\euqrfm.jar1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4200-2-0x000001FF9F1D0000-0x000001FF9F440000-memory.dmp
memory/4200-11-0x000001FF9E4F0000-0x000001FF9E4F1000-memory.dmp
memory/4200-21-0x000001FF9E4F0000-0x000001FF9E4F1000-memory.dmp
memory/4200-25-0x000001FF9F440000-0x000001FF9F450000-memory.dmp
memory/4200-26-0x000001FF9F450000-0x000001FF9F460000-memory.dmp
memory/4200-29-0x000001FF9F460000-0x000001FF9F470000-memory.dmp
memory/4200-31-0x000001FF9F470000-0x000001FF9F480000-memory.dmp
memory/4200-33-0x000001FF9F480000-0x000001FF9F490000-memory.dmp
memory/4200-35-0x000001FF9F490000-0x000001FF9F4A0000-memory.dmp
memory/4200-39-0x000001FF9F4A0000-0x000001FF9F4B0000-memory.dmp
memory/4200-41-0x000001FF9F4C0000-0x000001FF9F4D0000-memory.dmp
memory/4200-49-0x000001FF9F4E0000-0x000001FF9F4F0000-memory.dmp
memory/4200-48-0x000001FF9F4D0000-0x000001FF9F4E0000-memory.dmp
memory/4200-43-0x000001FF9F1D0000-0x000001FF9F440000-memory.dmp
memory/4200-52-0x000001FF9F4F0000-0x000001FF9F500000-memory.dmp
memory/4200-51-0x000001FF9F440000-0x000001FF9F450000-memory.dmp
memory/4200-40-0x000001FF9F4B0000-0x000001FF9F4C0000-memory.dmp
memory/4200-58-0x000001FF9F510000-0x000001FF9F520000-memory.dmp
memory/4200-57-0x000001FF9F460000-0x000001FF9F470000-memory.dmp
memory/4200-56-0x000001FF9F500000-0x000001FF9F510000-memory.dmp
memory/4200-55-0x000001FF9F450000-0x000001FF9F460000-memory.dmp
memory/4200-59-0x000001FF9E4F0000-0x000001FF9E4F1000-memory.dmp
memory/4200-63-0x000001FF9F520000-0x000001FF9F530000-memory.dmp
memory/4200-62-0x000001FF9F470000-0x000001FF9F480000-memory.dmp
memory/4200-67-0x000001FF9F480000-0x000001FF9F490000-memory.dmp
memory/4200-68-0x000001FF9F530000-0x000001FF9F540000-memory.dmp
memory/4200-71-0x000001FF9F540000-0x000001FF9F550000-memory.dmp
memory/4200-70-0x000001FF9F490000-0x000001FF9F4A0000-memory.dmp
memory/4200-72-0x000001FF9E4F0000-0x000001FF9E4F1000-memory.dmp
memory/4200-91-0x000001FF9F590000-0x000001FF9F5A0000-memory.dmp
memory/4200-89-0x000001FF9F570000-0x000001FF9F580000-memory.dmp
memory/4200-92-0x000001FF9F5A0000-0x000001FF9F5B0000-memory.dmp
memory/4200-90-0x000001FF9F580000-0x000001FF9F590000-memory.dmp
memory/4200-88-0x000001FF9F560000-0x000001FF9F570000-memory.dmp
memory/4200-86-0x000001FF9F550000-0x000001FF9F560000-memory.dmp
memory/4200-85-0x000001FF9F4C0000-0x000001FF9F4D0000-memory.dmp
memory/4200-83-0x000001FF9F4A0000-0x000001FF9F4B0000-memory.dmp
memory/4200-84-0x000001FF9F4B0000-0x000001FF9F4C0000-memory.dmp
memory/4200-94-0x000001FFBEEA0000-0x000001FFBEEA1000-memory.dmp
memory/4200-104-0x000001FF9F5B0000-0x000001FF9F5C0000-memory.dmp
memory/4200-103-0x000001FF9F4E0000-0x000001FF9F4F0000-memory.dmp
memory/4200-102-0x000001FF9F4D0000-0x000001FF9F4E0000-memory.dmp
memory/4200-105-0x000001FF9E4F0000-0x000001FF9E4F1000-memory.dmp
memory/4200-108-0x000001FF9F4F0000-0x000001FF9F500000-memory.dmp
memory/4200-111-0x000001FF9F5D0000-0x000001FF9F5E0000-memory.dmp
memory/4200-110-0x000001FF9F5C0000-0x000001FF9F5D0000-memory.dmp
memory/4200-109-0x000001FF9F500000-0x000001FF9F510000-memory.dmp
memory/4200-112-0x000001FF9E4F0000-0x000001FF9E4F1000-memory.dmp
memory/4200-113-0x000001FF9F510000-0x000001FF9F520000-memory.dmp
memory/4200-115-0x000001FF9F520000-0x000001FF9F530000-memory.dmp
memory/4200-116-0x000001FF9F530000-0x000001FF9F540000-memory.dmp
memory/4200-118-0x000001FF9F540000-0x000001FF9F550000-memory.dmp
memory/4200-120-0x000001FF9F5E0000-0x000001FF9F5F0000-memory.dmp
memory/4200-119-0x000001FF9F590000-0x000001FF9F5A0000-memory.dmp
memory/4200-121-0x000001FF9E4F0000-0x000001FF9E4F1000-memory.dmp
memory/4200-124-0x000001FF9F580000-0x000001FF9F590000-memory.dmp
memory/4200-122-0x000001FF9F550000-0x000001FF9F560000-memory.dmp
memory/4200-123-0x000001FF9F560000-0x000001FF9F570000-memory.dmp
memory/4200-125-0x000001FF9F5A0000-0x000001FF9F5B0000-memory.dmp
memory/4200-126-0x000001FF9F5B0000-0x000001FF9F5C0000-memory.dmp
memory/4200-128-0x000001FF9F5C0000-0x000001FF9F5D0000-memory.dmp
memory/4200-129-0x000001FF9F5F0000-0x000001FF9F600000-memory.dmp
memory/4200-131-0x000001FF9F5D0000-0x000001FF9F5E0000-memory.dmp