Resubmissions
24/09/2026, 04:14
260924-etscesdg7812/03/2026, 23:34
260312-3kx4baet7z03/02/2026, 02:33
260203-c1632sgw6a06/12/2025, 00:29
251206-as4lvaar3y1002/12/2025, 16:40
251202-t6s7tavmgx1002/12/2025, 16:34
251202-t29n1avme11002/12/2025, 15:52
251202-tbkbesgx7g1001/12/2025, 15:35
251201-s1m8yabs6f1014/11/2025, 18:45
251114-xd9kwafp9z03/11/2025, 07:54
251103-jry5eazjhq10Analysis
- max time kernel
891s - max time network
431s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
- submitted
16/01/2025, 12:49
General
- Target Malware-1-master/Illuminati.exe
- Size 1.1MB
- Sample250116-p2cbaasjam
- SHA256 f99e4c9a4dd14d402b16e36988b72f3fe7f34b42157f756dbd14b39c70059336
Malware Config
Signatures
- UPX packed file 64 IoCs
Detects executables packed with UPX/modified UPX open source packer.
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Malware-1-master\Illuminati.exe"C:\Users\Admin\AppData\Local\Temp\Malware-1-master\Illuminati.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3160-0-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-2-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-1-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-3-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-4-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-5-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-6-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-7-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-8-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-9-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-10-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-11-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-12-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-13-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-14-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-15-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-16-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-17-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-18-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-19-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-20-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-21-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-22-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-23-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-24-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-25-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-26-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-27-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-28-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-29-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-30-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-31-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-32-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-33-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-34-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-35-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-36-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-37-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-38-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-39-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-40-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-41-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-42-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-43-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-44-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-45-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-46-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-47-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-48-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-49-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-50-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-51-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-52-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-53-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-54-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-55-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-56-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-57-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-58-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-59-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-60-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-61-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-62-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-63-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-64-0x0000000000EC0000-0x0000000001268000-memory.dmp
memory/3160-65-0x0000000000EC0000-0x0000000001268000-memory.dmp