Analysis
- user interaction
yes - max time kernel
149s - max time network
149s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
- submitted
15/04/2026, 10:40
General
- Target basur.exe
- Size 68.9MB
- Sample260415-mqp2wsb13p
- SHA256 b0515c9e53a6400aeb9c95374039c5de165066b17fc3134b8d655cba8008a0fc
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
- Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\basur.exe"C:\Users\Admin\AppData\Local\Temp\basur.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3336-0-0x00007FF754532000-0x00007FF754D69000-memory.dmp
memory/3336-1-0x00007FF979850000-0x00007FF979852000-memory.dmp
memory/3336-2-0x00007FF979860000-0x00007FF979862000-memory.dmp
memory/3336-5-0x00007FF754460000-0x00007FF755AC0000-memory.dmp
memory/3336-7-0x00007FF979170000-0x00007FF979172000-memory.dmp
memory/3336-6-0x00007FF979160000-0x00007FF979162000-memory.dmp
memory/3336-8-0x00007FF976F70000-0x00007FF976F72000-memory.dmp
memory/3336-4-0x00007FF979880000-0x00007FF979882000-memory.dmp
memory/3336-9-0x00007FF976F80000-0x00007FF976F82000-memory.dmp
memory/3336-3-0x00007FF979870000-0x00007FF979872000-memory.dmp
memory/3336-13-0x00007FF754460000-0x00007FF755AC0000-memory.dmp
memory/3336-14-0x00007FF754532000-0x00007FF754D69000-memory.dmp
memory/3336-15-0x00007FF754460000-0x00007FF755AC0000-memory.dmp