Analysis
- max time kernel
101s - max time network
109s - platform
windows11-21h2_x64 - resource
win11-20250619-en - resource tags
- submitted
09/07/2025, 00:50
General
- Target Vvmrg.scr.exe
- Size 3.4MB
- Sample250709-a67knaskv7
- SHA256 f67f2fa47b7335ecfbfc059f1639f688321457a7a847c8d9f5156f35ac5ce814
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious behavior: EnumeratesProcesses 20 IoCs
- Suspicious use of AdjustPrivilegeToken 2 IoCs
- Suspicious use of WriteProcessMemory 40 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Vvmrg.scr.exe"C:\Users\Admin\AppData\Local\Temp\Vvmrg.scr.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\Vvmrg.scr.exe"C:\Users\Admin\AppData\Local\Temp\Vvmrg.scr.exe"2⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Vvmrg.scr.exe"C:\Users\Admin\AppData\Local\Temp\Vvmrg.scr.exe"2⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Vvmrg.scr.exe"C:\Users\Admin\AppData\Local\Temp\Vvmrg.scr.exe"2⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Vvmrg.scr.exe"C:\Users\Admin\AppData\Local\Temp\Vvmrg.scr.exe"2⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Vvmrg.scr.exe"C:\Users\Admin\AppData\Local\Temp\Vvmrg.scr.exe"2⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Vvmrg.scr.exe"C:\Users\Admin\AppData\Local\Temp\Vvmrg.scr.exe"2⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Vvmrg.scr.exe"C:\Users\Admin\AppData\Local\Temp\Vvmrg.scr.exe"2⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Vvmrg.scr.exe"C:\Users\Admin\AppData\Local\Temp\Vvmrg.scr.exe"2⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Vvmrg.scr.exe"C:\Users\Admin\AppData\Local\Temp\Vvmrg.scr.exe"2⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Vvmrg.scr.exe"C:\Users\Admin\AppData\Local\Temp\Vvmrg.scr.exe"2⤵
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2576-0-0x0000000000660000-0x00000000009D6000-memory.dmp
memory/2576-1-0x0000000005AA0000-0x0000000006046000-memory.dmp
memory/2576-2-0x00000000055D0000-0x0000000005662000-memory.dmp
memory/2576-3-0x0000000006050000-0x000000000636C000-memory.dmp
memory/2576-12-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-7-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-5-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-4-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-10-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-13-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-19-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-31-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-37-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-47-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-51-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-67-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-71-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-73-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-69-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-65-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-63-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-61-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-59-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-57-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-55-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-49-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-53-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-45-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-39-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-43-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-41-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-35-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-33-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-29-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-27-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-25-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-23-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-21-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-17-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-15-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-79-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-83-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-77-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-75-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-85-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-81-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-91-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-89-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-101-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-123-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-119-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-125-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-129-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-127-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-117-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-115-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-113-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-112-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-107-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-121-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-109-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-105-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-104-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-100-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-97-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-95-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-93-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-87-0x0000000006050000-0x0000000006367000-memory.dmp
memory/2576-6015-0x00000000059B0000-0x00000000059B1000-memory.dmp
memory/2576-6014-0x00000000057E0000-0x00000000057F0000-memory.dmp
memory/2576-6016-0x0000000006600000-0x00000000066A2000-memory.dmp
memory/2576-6017-0x00000000066A0000-0x0000000006740000-memory.dmp
memory/2576-6018-0x0000000006570000-0x00000000065BC000-memory.dmp
memory/2576-6019-0x00000000057E0000-0x00000000057F0000-memory.dmp
memory/2576-6020-0x0000000006780000-0x00000000067D4000-memory.dmp