Analysis
- max time kernel
149s - max time network
154s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
- submitted
15/04/2026, 06:41
General
- Target SigmaGUI.exe
- Size 41.4MB
- Sample260415-hfrerabt6x
- SHA256 c064bfdee33ea8bbc4c0c913ae1c018a1446eaae2ea79ad77a04a9a905781ccc
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\SigmaGUI.exe"C:\Users\Admin\AppData\Local\Temp\SigmaGUI.exe"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1416-0-0x00000234174A0000-0x00000234178E2000-memory.dmp
memory/1416-2-0x00000234178F0000-0x0000023417AF2000-memory.dmp
memory/1416-17-0x0000023416BF0000-0x0000023416BF1000-memory.dmp
memory/1416-16-0x0000023416BF0000-0x0000023416BF1000-memory.dmp
memory/1416-15-0x0000023416BF0000-0x0000023416BF1000-memory.dmp
memory/1416-14-0x0000023416BF0000-0x0000023416BF1000-memory.dmp
memory/1416-13-0x0000023416BF0000-0x0000023416BF1000-memory.dmp
memory/1416-12-0x0000023416BF0000-0x0000023416BF1000-memory.dmp
memory/1416-11-0x0000023416BF0000-0x0000023416BF1000-memory.dmp
memory/1416-10-0x0000023416BF0000-0x0000023416BF1000-memory.dmp
memory/1416-9-0x0000023416BF0000-0x0000023416BF1000-memory.dmp
memory/1416-8-0x0000023416BF0000-0x0000023416BF1000-memory.dmp
memory/1416-7-0x0000023416BF0000-0x0000023416BF1000-memory.dmp
memory/1416-6-0x0000023416BF0000-0x0000023416BF1000-memory.dmp
memory/1416-5-0x0000023416BF0000-0x0000023416BF1000-memory.dmp
memory/1416-4-0x0000023416BF0000-0x0000023416BF1000-memory.dmp
memory/1416-20-0x000002342FA50000-0x000002342FA51000-memory.dmp
memory/1416-19-0x000002342FA50000-0x000002342FA51000-memory.dmp
memory/1416-22-0x000002342FA60000-0x000002342FA61000-memory.dmp
memory/1416-23-0x000002342FA60000-0x000002342FA61000-memory.dmp
memory/1416-24-0x000002342FA60000-0x000002342FA61000-memory.dmp
memory/1416-26-0x000002342FA50000-0x000002342FA51000-memory.dmp
memory/1416-25-0x000002342FA50000-0x000002342FA51000-memory.dmp
memory/1416-27-0x000002342FA60000-0x000002342FA61000-memory.dmp
memory/1416-28-0x000002342FA60000-0x000002342FA61000-memory.dmp
memory/1416-30-0x000002342FA70000-0x000002342FA71000-memory.dmp
memory/1416-31-0x000002342FA60000-0x000002342FA61000-memory.dmp
memory/1416-33-0x000002342FA70000-0x000002342FA71000-memory.dmp
memory/1416-32-0x000002342FA70000-0x000002342FA71000-memory.dmp
memory/1416-36-0x000002342FA70000-0x000002342FA71000-memory.dmp
memory/1416-37-0x000002342FA70000-0x000002342FA71000-memory.dmp
memory/1416-35-0x000002342FA70000-0x000002342FA71000-memory.dmp
memory/1416-34-0x000002342FA70000-0x000002342FA71000-memory.dmp
memory/1416-39-0x000002342FA80000-0x000002342FA81000-memory.dmp
memory/1416-40-0x000002342FA80000-0x000002342FA81000-memory.dmp
memory/1416-41-0x000002342FA80000-0x000002342FA81000-memory.dmp
memory/1416-42-0x0000023417150000-0x0000023417265000-memory.dmp