Analysis
- max time kernel
148s - max time network
156s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
- submitted
04/03/2026, 10:16
General
- Target 44df7774a2dd736e353eb6c1d83ac87e6303e367d51ed9bf1d1eb2d5ee756281.exe
- Size 4KB
- Sample260304-ma2qraf19r
- SHA256 44df7774a2dd736e353eb6c1d83ac87e6303e367d51ed9bf1d1eb2d5ee756281
Score
10/10
Malware Config
Signatures
- Supershell
Supershell is a cross-platfrom reverse shell written in Golang.
- Supershell family
- Suspicious behavior: EnumeratesProcesses 1 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\44df7774a2dd736e353eb6c1d83ac87e6303e367d51ed9bf1d1eb2d5ee756281.exe"C:\Users\Admin\AppData\Local\Temp\44df7774a2dd736e353eb6c1d83ac87e6303e367d51ed9bf1d1eb2d5ee756281.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3828-0-0x0000000256A40000-0x0000000257271000-memory.dmp
memory/3828-9-0x000001EF2C700000-0x000001EF2E39D000-memory.dmp
memory/3828-10-0x000001EF2AFA0000-0x000001EF2AFD1000-memory.dmp
memory/3828-11-0x000001EF2C700000-0x000001EF2E39D000-memory.dmp