Resubmissions
15/08/2026, 21:19
260815-z592tshg5712/05/2026, 09:30
260512-lghqsah14t12/05/2026, 09:29
260512-lf4a4ad17m11/05/2026, 13:07
260511-qcln4aaw4z09/05/2026, 21:41
260509-1j69gsdv7w1009/05/2026, 21:41
260509-1jyx4sdv7s19/04/2026, 22:54
260419-2vxd4aby7r11/04/2026, 06:46
260411-hjw5eaas2p25/03/2026, 09:51
260325-lvksascz5w1022/02/2026, 15:16
260222-snsb5ab16e10Analysis
- max time kernel
148s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20250502-en - resource tags
- submitted
26/05/2025, 04:37
General
- Target KLwC6vii.exe
- Size 17KB
- Sample250526-e88mysdj21
- SHA256 a8745addaf2f95e0fe6afbc6d6712f817d4a819cf1d08bf7c0ff01822e18e1db
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\KLwC6vii.exe"C:\Users\Admin\AppData\Local\Temp\KLwC6vii.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1900-0-0x00007FFCAA985000-0x00007FFCAA986000-memory.dmp
memory/1900-1-0x000000001C290000-0x000000001C75E000-memory.dmp
memory/1900-2-0x000000001BCB0000-0x000000001BD56000-memory.dmp
memory/1900-3-0x00007FFCAA6D0000-0x00007FFCAB071000-memory.dmp
memory/1900-5-0x000000001C840000-0x000000001C8A2000-memory.dmp
memory/1900-4-0x00007FFCAA6D0000-0x00007FFCAB071000-memory.dmp
memory/1900-6-0x000000001CDC0000-0x000000001CE5C000-memory.dmp
memory/1900-7-0x00007FFCAA6D0000-0x00007FFCAB071000-memory.dmp
memory/1900-8-0x00007FFCAA985000-0x00007FFCAA986000-memory.dmp
memory/1900-9-0x00007FFCAA6D0000-0x00007FFCAB071000-memory.dmp