Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
04/11/2026, 17:49
General
- Target Danker.s.Skyblock.Mod-1.9.jar
- Size 655KB
- Sample261104-weeapayv3n
- SHA256 d7774b1393b4920b5fa7ae80b2e0eedd33a4fa5cb84e19975316989d5ef0f559
Malware Config
Signatures
- Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -jar C:\Users\Admin\AppData\Local\Temp\Danker.s.Skyblock.Mod-1.9.jar1⤵
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1280-2-0x00000209D9B90000-0x00000209D9E00000-memory.dmp
memory/1280-14-0x00000209D82F0000-0x00000209D82F1000-memory.dmp
memory/1280-24-0x00000209D9E00000-0x00000209D9E10000-memory.dmp
memory/1280-28-0x00000209D9E10000-0x00000209D9E20000-memory.dmp
memory/1280-31-0x00000209D9E20000-0x00000209D9E30000-memory.dmp
memory/1280-32-0x00000209D82F0000-0x00000209D82F1000-memory.dmp
memory/1280-34-0x00000209D9E30000-0x00000209D9E40000-memory.dmp
memory/1280-36-0x00000209D9E40000-0x00000209D9E50000-memory.dmp
memory/1280-39-0x00000209D9E50000-0x00000209D9E60000-memory.dmp
memory/1280-42-0x00000209D9E60000-0x00000209D9E70000-memory.dmp
memory/1280-44-0x00000209D9B90000-0x00000209D9E00000-memory.dmp
memory/1280-45-0x00000209D9E70000-0x00000209D9E80000-memory.dmp
memory/1280-46-0x00000209D82F0000-0x00000209D82F1000-memory.dmp
memory/1280-48-0x00000209D9E80000-0x00000209D9E90000-memory.dmp
memory/1280-50-0x00000209D9E90000-0x00000209D9EA0000-memory.dmp
memory/1280-53-0x00000209D9E00000-0x00000209D9E10000-memory.dmp
memory/1280-54-0x00000209D9EA0000-0x00000209D9EB0000-memory.dmp
memory/1280-57-0x00000209D9E10000-0x00000209D9E20000-memory.dmp
memory/1280-58-0x00000209D9EB0000-0x00000209D9EC0000-memory.dmp
memory/1280-61-0x00000209D9EC0000-0x00000209D9ED0000-memory.dmp
memory/1280-60-0x00000209D9E20000-0x00000209D9E30000-memory.dmp
memory/1280-63-0x00000209D9E30000-0x00000209D9E40000-memory.dmp
memory/1280-64-0x00000209D9ED0000-0x00000209D9EE0000-memory.dmp
memory/1280-66-0x00000209D9E40000-0x00000209D9E50000-memory.dmp
memory/1280-67-0x00000209D9EE0000-0x00000209D9EF0000-memory.dmp
memory/1280-70-0x00000209D9EF0000-0x00000209D9F00000-memory.dmp
memory/1280-69-0x00000209D9E50000-0x00000209D9E60000-memory.dmp
memory/1280-72-0x00000209D9E60000-0x00000209D9E70000-memory.dmp
memory/1280-73-0x00000209D9E70000-0x00000209D9E80000-memory.dmp
memory/1280-74-0x00000209D9E80000-0x00000209D9E90000-memory.dmp
memory/1280-75-0x00000209D9E90000-0x00000209D9EA0000-memory.dmp
memory/1280-76-0x00000209D9EA0000-0x00000209D9EB0000-memory.dmp
memory/1280-77-0x00000209D9EB0000-0x00000209D9EC0000-memory.dmp
memory/1280-78-0x00000209D9EC0000-0x00000209D9ED0000-memory.dmp
memory/1280-79-0x00000209D9ED0000-0x00000209D9EE0000-memory.dmp
memory/1280-80-0x00000209D9EE0000-0x00000209D9EF0000-memory.dmp
memory/1280-81-0x00000209D9EF0000-0x00000209D9F00000-memory.dmp