Resubmissions
22/11/2025, 17:35
251122-v57jgsbn8x1022/11/2025, 17:26
251122-vz93esbn4z22/11/2025, 17:15
251122-vsrmhabm4v1022/11/2025, 17:02
251122-vkblbavldp1022/11/2025, 16:57
251122-vggyxsvkgr1022/11/2025, 16:49
251122-vb6ebsbk511022/11/2025, 13:45
251122-q2m88aaj4t1021/11/2025, 21:15
251121-z4cpyagj3w12/11/2025, 03:22
251112-dw9ttaxrgx10Analysis
- max time kernel
172s - max time network
175s - platform
windows10-2004_x64 - resource
win10v2004-20251016-en - resource tags
- submitted
22/11/2025, 16:49
General
- Target Malware-1-master/Illuminati.exe
- Size 1.1MB
- Sample251122-vb6ebsbk51
- SHA256 f99e4c9a4dd14d402b16e36988b72f3fe7f34b42157f756dbd14b39c70059336
Malware Config
Signatures
- UPX packed file 19 IoCs
Detects executables packed with UPX/modified UPX open source packer.
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Malware-1-master\Illuminati.exe"C:\Users\Admin\AppData\Local\Temp\Malware-1-master\Illuminati.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2232-1-0x0000000000FB7000-0x0000000000FB8000-memory.dmp
memory/2232-0-0x0000000000C10000-0x0000000000FB8000-memory.dmp
memory/2232-2-0x0000000000C10000-0x0000000000FB8000-memory.dmp
memory/2232-3-0x0000000000C10000-0x0000000000FB8000-memory.dmp
memory/2232-4-0x0000000000C10000-0x0000000000FB8000-memory.dmp
memory/2232-5-0x0000000000C10000-0x0000000000FB8000-memory.dmp
memory/2232-6-0x0000000000C10000-0x0000000000FB8000-memory.dmp
memory/2232-7-0x0000000000C10000-0x0000000000FB8000-memory.dmp
memory/2232-8-0x0000000000C10000-0x0000000000FB8000-memory.dmp
memory/2232-9-0x0000000000C10000-0x0000000000FB8000-memory.dmp
memory/2232-10-0x0000000000C10000-0x0000000000FB8000-memory.dmp
memory/2232-11-0x0000000000C10000-0x0000000000FB8000-memory.dmp
memory/2232-12-0x0000000000C10000-0x0000000000FB8000-memory.dmp
memory/2232-13-0x0000000000C10000-0x0000000000FB8000-memory.dmp
memory/2232-14-0x0000000000C10000-0x0000000000FB8000-memory.dmp
memory/2232-15-0x0000000000C10000-0x0000000000FB8000-memory.dmp
memory/2232-16-0x0000000000C10000-0x0000000000FB8000-memory.dmp
memory/2232-17-0x0000000000C10000-0x0000000000FB8000-memory.dmp
memory/2232-18-0x0000000000C10000-0x0000000000FB8000-memory.dmp
memory/2232-19-0x0000000000C10000-0x0000000000FB8000-memory.dmp