Analysis
- max time kernel
149s - max time network
132s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
- submitted
19/02/2026, 12:53
General
- Target 068efd8c151240613d006ff80623e2bfc528bdb7b99584d52f34c1535c943fb4.exe
- Size 42KB
- Sample260219-p4tcksf16a
- SHA256 068efd8c151240613d006ff80623e2bfc528bdb7b99584d52f34c1535c943fb4
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\068efd8c151240613d006ff80623e2bfc528bdb7b99584d52f34c1535c943fb4.exe"C:\Users\Admin\AppData\Local\Temp\068efd8c151240613d006ff80623e2bfc528bdb7b99584d52f34c1535c943fb4.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4284-0-0x00007FFB3D755000-0x00007FFB3D756000-memory.dmp
memory/4284-1-0x000000001B530000-0x000000001B9FE000-memory.dmp
memory/4284-2-0x00007FFB3D4A0000-0x00007FFB3DE41000-memory.dmp
memory/4284-3-0x000000001BA00000-0x000000001BA9C000-memory.dmp
memory/4284-4-0x00007FFB3D4A0000-0x00007FFB3DE41000-memory.dmp
memory/4284-6-0x0000000000A00000-0x0000000000A08000-memory.dmp
memory/4284-5-0x00007FFB3D4A0000-0x00007FFB3DE41000-memory.dmp
memory/4284-7-0x00007FFB3D4A0000-0x00007FFB3DE41000-memory.dmp
memory/4284-8-0x00007FFB3D4A0000-0x00007FFB3DE41000-memory.dmp
memory/4284-9-0x00007FFB3D4A0000-0x00007FFB3DE41000-memory.dmp
memory/4284-11-0x00007FFB3D4A0000-0x00007FFB3DE41000-memory.dmp
memory/4284-12-0x00007FFB3D4A0000-0x00007FFB3DE41000-memory.dmp
memory/4284-13-0x00007FFB3D4A0000-0x00007FFB3DE41000-memory.dmp
memory/4284-14-0x00007FFB3D4A0000-0x00007FFB3DE41000-memory.dmp
memory/4284-15-0x00007FFB3D4A0000-0x00007FFB3DE41000-memory.dmp
memory/4284-16-0x00007FFB3D4A0000-0x00007FFB3DE41000-memory.dmp
memory/4284-19-0x00007FFB3D755000-0x00007FFB3D756000-memory.dmp
memory/4284-20-0x00007FFB3D4A0000-0x00007FFB3DE41000-memory.dmp
memory/4284-18-0x0000000000C00000-0x0000000000C12000-memory.dmp
memory/4284-17-0x000000001BDC0000-0x000000001BDCC000-memory.dmp