Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
- submitted
15/04/2026, 12:27
General
- Target UE5自由视角_v523/._cache_IGCSClient.exe
- Size 764KB
- Sample260415-pm286aes6j
- SHA256 34028249b136ea3d9f4946d023f925df905b191023e6d859b3170b1f8dc967b6
Malware Config
Signatures
- Modifies Control Panel 1 IoCs
- Suspicious behavior: EnumeratesProcesses 3 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\UE5自由视角_v523\._cache_IGCSClient.exe"C:\Users\Admin\AppData\Local\Temp\UE5自由视角_v523\._cache_IGCSClient.exe"1⤵
- Modifies Control Panel
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4876-0-0x0000012890140000-0x0000012890202000-memory.dmp
memory/4876-1-0x00000128AA650000-0x00000128AA660000-memory.dmp
memory/4876-2-0x00000128AA7A0000-0x00000128AA886000-memory.dmp
memory/4876-3-0x00000128AA660000-0x00000128AA686000-memory.dmp
memory/4876-4-0x0000012891EB0000-0x0000012891EB8000-memory.dmp
memory/4876-5-0x0000012891EC0000-0x0000012891ECA000-memory.dmp
memory/4876-6-0x00000128AA770000-0x00000128AA794000-memory.dmp
memory/4876-7-0x00000128AABF0000-0x00000128AACA2000-memory.dmp
memory/4876-8-0x00000128AACB0000-0x00000128AAD6A000-memory.dmp
memory/4876-9-0x00000128AAB70000-0x00000128AAB98000-memory.dmp
memory/4876-10-0x00000128AABA0000-0x00000128AABA8000-memory.dmp
memory/4876-11-0x00000128AB070000-0x00000128AB0A8000-memory.dmp
memory/4876-12-0x00000128AABB0000-0x00000128AABBE000-memory.dmp
memory/4876-13-0x00000128AA650000-0x00000128AA660000-memory.dmp
memory/4876-14-0x00000128AD9D0000-0x00000128AD9F2000-memory.dmp
memory/4876-15-0x00000128AA650000-0x00000128AA660000-memory.dmp
memory/4876-16-0x00000128AA650000-0x00000128AA660000-memory.dmp