Resubmissions
15/08/2026, 21:19
260815-z592tshg5712/05/2026, 09:30
260512-lghqsah14t12/05/2026, 09:29
260512-lf4a4ad17m11/05/2026, 13:07
260511-qcln4aaw4z09/05/2026, 21:41
260509-1j69gsdv7w1009/05/2026, 21:41
260509-1jyx4sdv7s19/04/2026, 22:54
260419-2vxd4aby7r11/04/2026, 06:46
260411-hjw5eaas2p25/03/2026, 09:51
260325-lvksascz5w1022/02/2026, 15:16
260222-snsb5ab16e10Analysis
- max time kernel
148s - max time network
159s - platform
windows11-21h2_x64 - resource
win11-20250619-en - resource tags
- submitted
27/06/2025, 17:28
General
- Target KLwC6vii.exe
- Size 17KB
- Sample250627-v1z9lsstdw
- SHA256 a8745addaf2f95e0fe6afbc6d6712f817d4a819cf1d08bf7c0ff01822e18e1db
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\KLwC6vii.exe"C:\Users\Admin\AppData\Local\Temp\KLwC6vii.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4320-0-0x00007FFE7BD95000-0x00007FFE7BD96000-memory.dmp
memory/4320-2-0x000000001C420000-0x000000001C8EE000-memory.dmp
memory/4320-1-0x00007FFE7BAE0000-0x00007FFE7C481000-memory.dmp
memory/4320-3-0x000000001BD60000-0x000000001BE06000-memory.dmp
memory/4320-4-0x000000001C8F0000-0x000000001C952000-memory.dmp
memory/4320-5-0x000000001D010000-0x000000001D0AC000-memory.dmp
memory/4320-6-0x00007FFE7BAE0000-0x00007FFE7C481000-memory.dmp
memory/4320-7-0x00007FFE7BAE0000-0x00007FFE7C481000-memory.dmp
memory/4320-8-0x00007FFE7BAE0000-0x00007FFE7C481000-memory.dmp
memory/4320-9-0x00007FFE7BAE0000-0x00007FFE7C481000-memory.dmp
memory/4320-10-0x00007FFE7BAE0000-0x00007FFE7C481000-memory.dmp
memory/4320-11-0x00007FFE7BD95000-0x00007FFE7BD96000-memory.dmp
memory/4320-12-0x00007FFE7BAE0000-0x00007FFE7C481000-memory.dmp
memory/4320-13-0x00007FFE7BAE0000-0x00007FFE7C481000-memory.dmp