Analysis
- max time kernel
149s - max time network
144s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
04/11/2026, 23:50
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
AoH2MP.jar
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
AoH2MP.jar
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target AoH2MP.jar
- Size 18.7MB
- Sample261104-3vs74sfa29
- SHA256 0e13004cd3a64bf18a5436cda8a4646ba813091ebc2c8a56c1d387b4a21cf9b6
- MD5 4d212ef2642d4d7532b49845e4237e4a
- SHA1 7a4326ebd33b81ad70beed3190157452eb964fbe
- SHA512 f0791c8064bcc6b2ba761305182a6d2b1d63e87ff107ecdfb1f1900ed4b241eb3b1daa5635cce599a42f32591c5f8bd69a0ef29ac97f72302477717c61adcaf4
- SSDEEP 393216:40yCfQfHJ5SM7cQCCt/SPKUH1d6xHG77DD:fWJ42cfa/SiUVd6xHAPD
- TLSH T1331702EABF85CE6FE10750371850F2A3647EA484E25ED05FB1A40E4D2EA6C494317FDA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 2 IoCs
pid Process 3668 java.exe 3668 java.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3668 java.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\steamworks4j\1.8.0\steam_api64.dll
- Size 244KB
- SHA256 b8246e1a629b945fe526b24c3e4f002c4f6eb86aa1b5ed9744399f22a0d2ca9f
- MD5 2a09ae29b5613645a4b30e9deea68042
- SHA1 e77433094c56433685a68a4436e81b76c3b5e1f5
- SHA512 9f7cfbd07e8d1c376ad2247d1b356a557e4f799c77866838152b2bea43cb71ae3c9bf88e9ba7dee22c7f15d212473de9de97ab9af32003d1f802763f3ff4bc8b
- SSDEEP 3072:3NLHFM+SkIWjKSEW6p0TPj3pAoSQp5doyF/OHy7+HytNICJxHnNJQcLRaz:pHi+SVWSZp0TL59SQH2KKyoCJlNJtE
- TLSH T1A2342B6A72354CB6D5B3C238C9955A4FE771348B13209EDF2B94033A4E676C27E3B291
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\steamworks4j\1.8.0\steamworks4j64.dll
- Size 266KB
- SHA256 e6e108de862ae2390573250f98c63e109d0a5f0c567b0844fbe46f5c115a6438
- MD5 b748cfcb4bb0108fca5c6941825d1294
- SHA1 04c4b7f85c2142d47ac36b6680267337a47ea43d
- SHA512 77d6265676295d165a0bfa4d66c2619e63a819635fd736ea567a247e4fd6973e5dcbf599a1e7d9015f79a3f974cc57ced09e4f5dab39d0f14651ce67b09bed71
- SSDEEP 3072:lCZWnO0WhzraHd+GRA9rMU/Zd4PYtPrHFr0/iq18k1geseHIEXSRa+8A8lrFLEEs:0Zdhzra29/ugBeHFSZHcqStu
- TLSH T1CC443A5A729A4CB1EC6FE17C8A47894FE2B6B4120711DBCF0761036E9E9F3D86935321
- MD5 SHA1 SHA512 SSDEEP TLSH