Analysis
- max time kernel
147s - max time network
104s - platform
windows11-21h2_x64 - resource
win11-20250619-en - resource tags
- submitted
11/09/2025, 15:46
General
- Target updater.exe
- Size 1.5MB
- Sample250911-s7xe7avtev
- SHA256 f2ff4cbcd6d015af20e4e858b0f216c077ec6d146d3b2e0cbe68b56b3db7a0be
Malware Config
Signatures
- Suspicious use of SetThreadContext 1 IoCs
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
- Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\updater.exe"C:\Users\Admin\AppData\Local\Temp\updater.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
-
C:\Windows\bfsvc.exeC:\Windows\bfsvc.exe2⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5544-0-0x000001B9AE780000-0x000001B9AE7E3000-memory.dmp
memory/5544-1-0x000001B9AE780000-0x000001B9AE7E3000-memory.dmp
memory/5544-2-0x000001B9AE780000-0x000001B9AE7E3000-memory.dmp
memory/5544-4-0x000001B9AE780000-0x000001B9AE7E3000-memory.dmp
memory/5544-7-0x000001B9AE780000-0x000001B9AE7E3000-memory.dmp
memory/5544-6-0x000001B9AE780000-0x000001B9AE7E3000-memory.dmp
memory/5544-5-0x000001B9AE780000-0x000001B9AE7E3000-memory.dmp
memory/5544-8-0x000001B9AE780000-0x000001B9AE7E3000-memory.dmp
memory/5544-10-0x000001B9AE780000-0x000001B9AE7E3000-memory.dmp
memory/5544-9-0x000001B9AE780000-0x000001B9AE7E3000-memory.dmp
memory/5544-3-0x000001B9AE780000-0x000001B9AE7E3000-memory.dmp
memory/5544-15-0x000001B9AE780000-0x000001B9AE7E3000-memory.dmp
memory/5544-19-0x000001B9AE780000-0x000001B9AE7E3000-memory.dmp
memory/5544-18-0x000001B9AE780000-0x000001B9AE7E3000-memory.dmp
memory/5544-17-0x000001B9AE780000-0x000001B9AE7E3000-memory.dmp
memory/5544-14-0x000001B9AE780000-0x000001B9AE7E3000-memory.dmp
memory/5544-13-0x000001B9AE780000-0x000001B9AE7E3000-memory.dmp
memory/5544-11-0x000001B9AE780000-0x000001B9AE7E3000-memory.dmp
memory/5544-20-0x000001B9AE780000-0x000001B9AE7E3000-memory.dmp
memory/5544-16-0x000001B9AE780000-0x000001B9AE7E3000-memory.dmp
memory/5544-12-0x000001B9AE780000-0x000001B9AE7E3000-memory.dmp
memory/5544-22-0x000001B9AE780000-0x000001B9AE7E3000-memory.dmp