Analysis
- max time kernel
149s - max time network
150s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
- submitted
26/03/2026, 23:27
General
- Target SharpHound.exe
- Size 1.3MB
- Sample260326-3fpalsfx8q
- SHA256 50a2fc1f55fdc0f5799a49126f2e47ba9c00d2a92f47a608e4bea1c7070ae5d1
Malware Config
Signatures
- Detects SharpHound hacktool 1 IoCs
- SharpHound
SharpHound is an open-source tool that collects Active Directory data for BloodHound analysis.
- Sharphound family
Processes
-
C:\Users\Admin\AppData\Local\Temp\SharpHound.exe"C:\Users\Admin\AppData\Local\Temp\SharpHound.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4924-0-0x0000020935070000-0x00000209351B8000-memory.dmp
memory/4924-1-0x000002094F700000-0x000002094F710000-memory.dmp
memory/4924-2-0x0000020936E20000-0x0000020936E5C000-memory.dmp
memory/4924-3-0x000002094F640000-0x000002094F654000-memory.dmp
memory/4924-4-0x000002094F660000-0x000002094F6F0000-memory.dmp
memory/4924-6-0x000002094F770000-0x000002094F778000-memory.dmp
memory/4924-7-0x000002094F6F0000-0x000002094F6FA000-memory.dmp
memory/4924-5-0x000002094F730000-0x000002094F756000-memory.dmp
memory/4924-8-0x000002094F7C0000-0x000002094F7F2000-memory.dmp
memory/4924-9-0x000002094F760000-0x000002094F76A000-memory.dmp
memory/4924-10-0x000002094F780000-0x000002094F794000-memory.dmp
memory/4924-11-0x000002094F900000-0x000002094F9B0000-memory.dmp
memory/4924-13-0x0000020936DF0000-0x0000020936DFC000-memory.dmp