Resubmissions
24/09/2026, 04:14
260924-etscesdg7812/03/2026, 23:34
260312-3kx4baet7z03/02/2026, 02:33
260203-c1632sgw6a06/12/2025, 00:29
251206-as4lvaar3y1002/12/2025, 16:40
251202-t6s7tavmgx1002/12/2025, 16:34
251202-t29n1avme11002/12/2025, 15:52
251202-tbkbesgx7g1001/12/2025, 15:35
251201-s1m8yabs6f1014/11/2025, 18:45
251114-xd9kwafp9z03/11/2025, 07:54
251103-jry5eazjhq10Analysis
- max time kernel
890s - max time network
842s - platform
windows7_x64 - resource
win7-20240903-en - resource tags
- submitted
16/01/2025, 12:49
General
- Target Malware-1-master/Illuminati.exe
- Size 1.1MB
- Sample250116-p2cbaasjam
- SHA256 f99e4c9a4dd14d402b16e36988b72f3fe7f34b42157f756dbd14b39c70059336
Malware Config
Signatures
- UPX packed file 64 IoCs
Detects executables packed with UPX/modified UPX open source packer.
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Malware-1-master\Illuminati.exe"C:\Users\Admin\AppData\Local\Temp\Malware-1-master\Illuminati.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2356-0-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-1-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-2-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-3-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-4-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-5-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-6-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-7-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-8-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-9-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-10-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-11-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-12-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-13-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-14-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-15-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-16-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-17-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-18-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-19-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-20-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-21-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-22-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-23-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-24-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-25-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-26-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-27-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-28-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-29-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-30-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-31-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-32-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-33-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-34-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-35-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-36-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-37-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-38-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-39-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-40-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-41-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-42-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-43-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-44-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-45-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-46-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-47-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-48-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-49-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-50-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-51-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-52-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-53-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-54-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-55-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-56-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-57-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-58-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-59-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-60-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-61-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-62-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-63-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-64-0x0000000000B60000-0x0000000000F08000-memory.dmp
memory/2356-65-0x0000000000B60000-0x0000000000F08000-memory.dmp