Analysis
- user interaction
yes - max time kernel
243s - max time network
244s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
- submitted
17/04/2026, 18:10
General
- Target win64.console.exe
- Size 89KB
- Sample260417-wsbrqaey8m
- SHA256 4c9e3852dffb789567fa55739f5568bb0da62fd2f1fdbdce3628b777d07a593d
Malware Config
Signatures
- Modifies registry class 1 IoCs
- Suspicious use of FindShellTrayWindow 1 IoCs
- Suspicious use of SetWindowsHookEx 3 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\win64.console.exe"C:\Users\Admin\AppData\Local\Temp\win64.console.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\win64.exeC:\Users\Admin\AppData\Local\Temp\win64.exe2⤵
- Modifies registry class
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3924-71-0x00007FF60B250000-0x00007FF60B26D000-memory.dmp
memory/4116-0-0x000002515DB50000-0x000002515DB51000-memory.dmp
memory/4116-2-0x000002515DB50000-0x000002515DB51000-memory.dmp
memory/4116-1-0x000002515DB50000-0x000002515DB51000-memory.dmp
memory/4116-73-0x000002515BFE0000-0x000002515C10A000-memory.dmp
memory/4116-72-0x00007FF74DF70000-0x00007FF7540D6000-memory.dmp
memory/4116-79-0x000002515BFE0000-0x000002515C10A000-memory.dmp
memory/4116-75-0x00007FF74DF70000-0x00007FF7540D6000-memory.dmp
memory/4116-78-0x00007FF74DF70000-0x00007FF7540D6000-memory.dmp
memory/4116-81-0x00007FF74DF70000-0x00007FF7540D6000-memory.dmp
memory/4116-84-0x00007FF74DF70000-0x00007FF7540D6000-memory.dmp
memory/4116-87-0x00007FF74DF70000-0x00007FF7540D6000-memory.dmp