Analysis

  • max time kernel
    300s
  • max time network
    6s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    29/10/2026, 18:47

General

  • Target
    68eltj.jar
  • Size 3.0MB
  • Sample261029-xffqksd19s
  • SHA256 bdcb9bd162125d9831878e8494046dfc9411a7625e4ca1772ba91b0f87aaae09
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\68eltj.jar
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:5096

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/5096-2-0x000001C20B2D0000-0x000001C20B540000-memory.dmp

        memory/5096-11-0x000001C208DB0000-0x000001C208DB1000-memory.dmp

        memory/5096-21-0x000001C208DB0000-0x000001C208DB1000-memory.dmp

        memory/5096-24-0x000001C20B540000-0x000001C20B550000-memory.dmp

        memory/5096-25-0x000001C20B550000-0x000001C20B560000-memory.dmp

        memory/5096-28-0x000001C20B560000-0x000001C20B570000-memory.dmp

        memory/5096-30-0x000001C20B570000-0x000001C20B580000-memory.dmp

        memory/5096-32-0x000001C20B580000-0x000001C20B590000-memory.dmp

        memory/5096-35-0x000001C20B590000-0x000001C20B5A0000-memory.dmp

        memory/5096-41-0x000001C20B5C0000-0x000001C20B5D0000-memory.dmp

        memory/5096-49-0x000001C20B5D0000-0x000001C20B5E0000-memory.dmp

        memory/5096-40-0x000001C20B5B0000-0x000001C20B5C0000-memory.dmp

        memory/5096-39-0x000001C20B5A0000-0x000001C20B5B0000-memory.dmp

        memory/5096-53-0x000001C20B600000-0x000001C20B610000-memory.dmp

        memory/5096-57-0x000001C20B610000-0x000001C20B620000-memory.dmp

        memory/5096-56-0x000001C20B540000-0x000001C20B550000-memory.dmp

        memory/5096-51-0x000001C20B5F0000-0x000001C20B600000-memory.dmp

        memory/5096-50-0x000001C20B5E0000-0x000001C20B5F0000-memory.dmp

        memory/5096-48-0x000001C20B2D0000-0x000001C20B540000-memory.dmp

        memory/5096-54-0x000001C208DB0000-0x000001C208DB1000-memory.dmp

        memory/5096-60-0x000001C20B620000-0x000001C20B630000-memory.dmp

        memory/5096-59-0x000001C20B550000-0x000001C20B560000-memory.dmp

        memory/5096-65-0x000001C20B630000-0x000001C20B640000-memory.dmp

        memory/5096-64-0x000001C20B560000-0x000001C20B570000-memory.dmp

        memory/5096-66-0x000001C208DB0000-0x000001C208DB1000-memory.dmp

        memory/5096-68-0x000001C20B570000-0x000001C20B580000-memory.dmp

        memory/5096-72-0x000001C20B580000-0x000001C20B590000-memory.dmp

        memory/5096-71-0x000001C20B640000-0x000001C20B650000-memory.dmp

        memory/5096-85-0x000001C20B670000-0x000001C20B680000-memory.dmp

        memory/5096-91-0x000001C20B5C0000-0x000001C20B5D0000-memory.dmp

        memory/5096-90-0x000001C20B5B0000-0x000001C20B5C0000-memory.dmp

        memory/5096-93-0x000001C20B6B0000-0x000001C20B6C0000-memory.dmp

        memory/5096-95-0x000001C22AE50000-0x000001C22AE51000-memory.dmp

        memory/5096-89-0x000001C20B5A0000-0x000001C20B5B0000-memory.dmp

        memory/5096-88-0x000001C20B6A0000-0x000001C20B6B0000-memory.dmp

        memory/5096-87-0x000001C20B690000-0x000001C20B6A0000-memory.dmp

        memory/5096-86-0x000001C20B680000-0x000001C20B690000-memory.dmp

        memory/5096-84-0x000001C20B660000-0x000001C20B670000-memory.dmp

        memory/5096-83-0x000001C20B590000-0x000001C20B5A0000-memory.dmp

        memory/5096-73-0x000001C20B650000-0x000001C20B660000-memory.dmp

        memory/5096-103-0x000001C20B5D0000-0x000001C20B5E0000-memory.dmp

        memory/5096-107-0x000001C20B6C0000-0x000001C20B6D0000-memory.dmp

        memory/5096-106-0x000001C20B600000-0x000001C20B610000-memory.dmp

        memory/5096-109-0x000001C20B6D0000-0x000001C20B6E0000-memory.dmp

        memory/5096-105-0x000001C20B5F0000-0x000001C20B600000-memory.dmp

        memory/5096-104-0x000001C20B5E0000-0x000001C20B5F0000-memory.dmp

        memory/5096-110-0x000001C208DB0000-0x000001C208DB1000-memory.dmp

        memory/5096-111-0x000001C20B610000-0x000001C20B620000-memory.dmp

        memory/5096-112-0x000001C20B620000-0x000001C20B630000-memory.dmp

        memory/5096-115-0x000001C20B6E0000-0x000001C20B6F0000-memory.dmp

        memory/5096-117-0x000001C20B630000-0x000001C20B640000-memory.dmp

        memory/5096-118-0x000001C20B640000-0x000001C20B650000-memory.dmp

        memory/5096-119-0x000001C20B650000-0x000001C20B660000-memory.dmp

        memory/5096-120-0x000001C208DB0000-0x000001C208DB1000-memory.dmp

        memory/5096-121-0x000001C20B660000-0x000001C20B670000-memory.dmp

        memory/5096-122-0x000001C20B690000-0x000001C20B6A0000-memory.dmp

        memory/5096-123-0x000001C20B6A0000-0x000001C20B6B0000-memory.dmp

        memory/5096-124-0x000001C20B6B0000-0x000001C20B6C0000-memory.dmp

        memory/5096-127-0x000001C20B6C0000-0x000001C20B6D0000-memory.dmp

        memory/5096-128-0x000001C20B6F0000-0x000001C20B700000-memory.dmp

        memory/5096-130-0x000001C20B6D0000-0x000001C20B6E0000-memory.dmp

        memory/5096-131-0x000001C20B6E0000-0x000001C20B6F0000-memory.dmp

        memory/5096-136-0x000001C20B700000-0x000001C20B710000-memory.dmp

        memory/5096-135-0x000001C20B6F0000-0x000001C20B700000-memory.dmp

        memory/5096-140-0x000001C20B710000-0x000001C20B720000-memory.dmp

        memory/5096-142-0x000001C20B720000-0x000001C20B730000-memory.dmp

        memory/5096-144-0x000001C20B700000-0x000001C20B710000-memory.dmp

        memory/5096-145-0x000001C20B710000-0x000001C20B720000-memory.dmp

        memory/5096-146-0x000001C20B720000-0x000001C20B730000-memory.dmp

        memory/5096-150-0x000001C20B730000-0x000001C20B740000-memory.dmp

        memory/5096-153-0x000001C20B730000-0x000001C20B740000-memory.dmp

        memory/5096-156-0x000001C20B740000-0x000001C20B750000-memory.dmp

        memory/5096-160-0x000001C20B750000-0x000001C20B760000-memory.dmp

        memory/5096-162-0x000001C20B740000-0x000001C20B750000-memory.dmp

        memory/5096-163-0x000001C20B750000-0x000001C20B760000-memory.dmp

        memory/5096-167-0x000001C20B760000-0x000001C20B770000-memory.dmp

        memory/5096-169-0x000001C20B760000-0x000001C20B770000-memory.dmp

        memory/5096-171-0x000001C208DB0000-0x000001C208DB1000-memory.dmp

        memory/5096-174-0x000001C20B770000-0x000001C20B780000-memory.dmp

        memory/5096-179-0x000001C20B770000-0x000001C20B780000-memory.dmp

        memory/5096-182-0x000001C20B780000-0x000001C20B790000-memory.dmp

        memory/5096-188-0x000001C20B790000-0x000001C20B7A0000-memory.dmp

        memory/5096-189-0x000001C20B7A0000-0x000001C20B7B0000-memory.dmp

        memory/5096-190-0x000001C20B7B0000-0x000001C20B7C0000-memory.dmp

        memory/5096-192-0x000001C20B780000-0x000001C20B790000-memory.dmp

        memory/5096-195-0x000001C20B790000-0x000001C20B7A0000-memory.dmp

        memory/5096-196-0x000001C20B7B0000-0x000001C20B7C0000-memory.dmp

        memory/5096-197-0x000001C20B7C0000-0x000001C20B7D0000-memory.dmp

        memory/5096-202-0x000001C20B7D0000-0x000001C20B7E0000-memory.dmp

        memory/5096-203-0x000001C20B7C0000-0x000001C20B7D0000-memory.dmp

        memory/5096-204-0x000001C20B7D0000-0x000001C20B7E0000-memory.dmp

        memory/5096-207-0x000001C20B7E0000-0x000001C20B7F0000-memory.dmp

        memory/5096-216-0x000001C20B7F0000-0x000001C20B800000-memory.dmp

        memory/5096-219-0x000001C20B7F0000-0x000001C20B800000-memory.dmp

        memory/5096-222-0x000001C20B800000-0x000001C20B810000-memory.dmp

        memory/5096-225-0x000001C20B800000-0x000001C20B810000-memory.dmp

        memory/5096-227-0x000001C20B810000-0x000001C20B820000-memory.dmp

        memory/5096-230-0x000001C20B820000-0x000001C20B830000-memory.dmp

        memory/5096-231-0x000001C20B810000-0x000001C20B820000-memory.dmp

        memory/5096-233-0x000001C20B820000-0x000001C20B830000-memory.dmp

        memory/5096-235-0x000001C20B830000-0x000001C20B840000-memory.dmp

        memory/5096-238-0x000001C20B830000-0x000001C20B840000-memory.dmp

        memory/5096-240-0x000001C20B840000-0x000001C20B850000-memory.dmp

        memory/5096-242-0x000001C20B850000-0x000001C20B860000-memory.dmp