Overview

overview

6

Static

static

1

jre-8u503-...64.exe

windows10-2004-x64

4

jre-8u503-...64.exe

windows11-ltsc_2024-x64

6

Analysis

  • user interaction
    yes
  • max time kernel
    1800s
  • max time network
    1765s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    02/11/2026, 10:41

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    jre-8u503-windows-x64.exe
  • Size 69.0MB
  • Sample261102-mrle4abs7m
  • SHA256 962c586f1407a42954cde8dfa68d4ad361ced1b50d547bab1c23ffffe5e2c2ed
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10
discovery

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1704,i,4353089202264470663,9300025302060401112,262144 --field-trial-handle=2028,i,5139475822447258246,16930695608068771470,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2016 /prefetch:2
    1⤵
      PID:3668
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2280,i,2144882024172990366,6147705428712978081,524288 --field-trial-handle=2028,i,5139475822447258246,16930695608068771470,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2308 /prefetch:3
      1⤵
      • System Time Discovery
      PID:2364
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2404,i,15330598867327467333,16765000057135300772,524288 --field-trial-handle=2028,i,5139475822447258246,16930695608068771470,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2416 /prefetch:8
      1⤵
        PID:4104
      • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
        1⤵
          PID:4528
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=6 --metrics-shmem-handle=3236,i,10093663698544929087,15132006328250229548,2097152 --field-trial-handle=2028,i,5139475822447258246,16930695608068771470,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3248 /prefetch:1
          1⤵
            PID:4156
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=5 --metrics-shmem-handle=3256,i,4925696356545566462,4571383184895990841,2097152 --field-trial-handle=2028,i,5139475822447258246,16930695608068771470,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3280 /prefetch:1
            1⤵
              PID:3972
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=7 --metrics-shmem-handle=4212,i,6865236895207137396,4731073849151132726,2097152 --field-trial-handle=2028,i,5139475822447258246,16930695608068771470,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4248 /prefetch:2
              1⤵
                PID:3028
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=8 --metrics-shmem-handle=4560,i,250059051158811087,14257865712401427741,2097152 --field-trial-handle=2028,i,5139475822447258246,16930695608068771470,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4568 /prefetch:1
                1⤵
                  PID:2272
                • C:\Users\Admin\AppData\Local\Temp\jre-8u503-windows-x64.exe
                  "C:\Users\Admin\AppData\Local\Temp\jre-8u503-windows-x64.exe"
                  1⤵
                  • Suspicious use of WriteProcessMemory
                  PID:2340
                  • C:\Users\Admin\AppData\Local\Temp\jds240682312.tmp\jre-8u503-windows-x64.exe
                    "C:\Users\Admin\AppData\Local\Temp\jds240682312.tmp\jre-8u503-windows-x64.exe"
                    2⤵
                    • Executes dropped EXE
                    • Reads the TCP/IP host and domain name from the registry
                    • Suspicious use of SetWindowsHookEx
                    PID:3544
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5420,i,17365604308859443667,10955298871877577076,524288 --field-trial-handle=2028,i,5139475822447258246,16930695608068771470,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5428 /prefetch:8
                  1⤵
                    PID:4520
                  • C:\Windows\system32\svchost.exe
                    C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                    1⤵
                      PID:4320
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5912,i,18246919750280211461,10029249538351617962,524288 --field-trial-handle=2028,i,5139475822447258246,16930695608068771470,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5876 /prefetch:8
                      1⤵
                        PID:4332
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5684,i,1609237517872295641,956714190261515408,524288 --field-trial-handle=2028,i,5139475822447258246,16930695608068771470,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5940 /prefetch:8
                        1⤵
                          PID:1616
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5700,i,15954614896368419116,6223066347056574781,524288 --field-trial-handle=2028,i,5139475822447258246,16930695608068771470,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5792 /prefetch:8
                          1⤵
                            PID:444
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5420,i,11538120180988075827,14328760965786428846,262144 --field-trial-handle=2028,i,5139475822447258246,16930695608068771470,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5756 /prefetch:8
                            1⤵
                            • Suspicious behavior: EnumeratesProcesses
                            PID:1412
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=5676,i,9861947903266373697,4965538291062083057,524288 --field-trial-handle=2028,i,5139475822447258246,16930695608068771470,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3136 /prefetch:8
                            1⤵
                              PID:3132

                            Network

                                  MITRE ATT&CK Enterprise v16

                                  Replay Monitor

                                  Loading Replay Monitor...

                                  Downloads

                                  1f43cd75-0822-48e9-aed4-37492f97f447.tmp
                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\1f43cd75-0822-48e9-aed4-37492f97f447.tmp
                                  • Size 2B
                                  • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                  • MD5 SHA1 SHA512
                                  Submit Download

                                  263aab94-470a-4143-ad82-da81e67e2893.tmp
                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\263aab94-470a-4143-ad82-da81e67e2893.tmp
                                  • Size 2KB
                                  • SHA256 c7fa20e150d3234416a29fa8ed7e34ddc1e8f87c269725efafd7a047dc0f093c
                                  • MD5 SHA1 SHA512 TLSH
                                  Submit Download

                                  b430a011-af1f-4e94-87fc-272946a8f89c.tmp
                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\b430a011-af1f-4e94-87fc-272946a8f89c.tmp
                                  • Size 523B
                                  • SHA256 a30edc68e39373cd209f37ae41c00687fcaaf6bd3da53a8ccd4f0d02a2e815fa
                                  • MD5 SHA1 SHA512 TLSH
                                  Submit Download

                                  jusched.log
                                  • Path C:\Users\Admin\AppData\Local\Temp\jusched.log
                                  • Size 166KB
                                  • SHA256 ed35a6fc474afb6781e1c79f6719bd1f207d32d333d1ac2360cdf3f4e7c82e97
                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                  Submit Download

                                  jusched.log
                                  • Path C:\Users\Admin\AppData\Local\Temp\jusched.log
                                  • Size 163KB
                                  • SHA256 af4af1af7f8c62b63d975930401f745bb6768045981f6866ba7f6a21285ba0c0
                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                  Submit Download

                                  memory/3544-151-0x0000023EF64C0000-0x0000023EF6C17000-memory.dmp
                                  Download

                                  memory/3544-189-0x0000023EF64C0000-0x0000023EF6C17000-memory.dmp
                                  Download

                                  memory/3544-224-0x0000023EF64C0000-0x0000023EF6C17000-memory.dmp
                                  Download