Analysis
- user interaction
yes - max time kernel
144s - max time network
148s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
- submitted
20/04/2026, 18:38
General
- Target hm-mag-v2.5.9.exe
- Size 68.5MB
- Sample260420-xaamdaev2s
- SHA256 b68dffeb5392ad89b515518fcf1678962cb5ae30c8f4293ec7743989f5775abd
Malware Config
Signatures
- Loads dropped DLL 26 IoCs
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\hm-mag-v2.5.9.exe"C:\Users\Admin\AppData\Local\Temp\hm-mag-v2.5.9.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
evb109C.tmp
evb10BC.tmp
evb10BE.tmp
evb10CF.tmp
evb10EF.tmp
evb1100.tmp
evb113F.tmp
evb1160.tmp
evb11DE.tmp
evb11EF.tmp
evb1200.tmp
evb1201.tmp
evb1202.tmp
evb1212.tmp
evb1224.tmp
evb1225.tmp
evb1226.tmp
evbCCD.tmp
evbCDE.tmp
evbCDF.tmp
evbDEA.tmp
evbE29.tmp
evbFB1.tmp
memory/1828-114-0x0000000004630000-0x000000000463C000-memory.dmp
memory/1828-92-0x0000000003EC0000-0x000000000401A000-memory.dmp
memory/1828-141-0x00000000030A0000-0x000000000380E000-memory.dmp
memory/1828-154-0x0000000004720000-0x000000000472D000-memory.dmp
memory/1828-164-0x0000000003DF0000-0x0000000003EA5000-memory.dmp
memory/1828-165-0x00000000045F0000-0x0000000004617000-memory.dmp
memory/1828-163-0x00000000022E0000-0x000000000236D000-memory.dmp
memory/1828-162-0x0000000003810000-0x0000000003D83000-memory.dmp
memory/1828-161-0x0000000002EC0000-0x0000000003098000-memory.dmp
memory/1828-160-0x00007FFAD27F0000-0x00007FFAD29E5000-memory.dmp
memory/1828-159-0x0000000004870000-0x00000000048F5000-memory.dmp
memory/1828-158-0x0000000004850000-0x000000000485C000-memory.dmp
memory/1828-157-0x00000000047D0000-0x0000000004839000-memory.dmp
memory/1828-156-0x00000000047B0000-0x00000000047BC000-memory.dmp
memory/1828-155-0x0000000004740000-0x000000000479A000-memory.dmp
memory/1828-153-0x0000000004690000-0x0000000004702000-memory.dmp
memory/1828-152-0x0000000004670000-0x000000000467E000-memory.dmp
memory/1828-151-0x0000000004650000-0x0000000004660000-memory.dmp
memory/1828-150-0x0000000004630000-0x000000000463E000-memory.dmp
memory/1828-149-0x00000000041B0000-0x0000000004280000-memory.dmp
memory/1828-148-0x00007FFAD27F0000-0x00007FFAD29E5000-memory.dmp
memory/1828-147-0x0000000004030000-0x000000000404E000-memory.dmp
memory/1828-146-0x0000000003EC0000-0x000000000401A000-memory.dmp
memory/1828-145-0x0000000003DA0000-0x0000000003DE1000-memory.dmp
memory/1828-144-0x0000000003D90000-0x0000000003D99000-memory.dmp
memory/1828-143-0x0000000002390000-0x000000000239C000-memory.dmp
memory/1828-142-0x0000000002370000-0x000000000238B000-memory.dmp
memory/1828-49-0x0000000003810000-0x0000000003D83000-memory.dmp
memory/1828-45-0x00007FFAD27F0000-0x00007FFAD29E5000-memory.dmp
memory/1828-41-0x00000000030A0000-0x000000000380E000-memory.dmp
memory/1828-37-0x00000000030A0000-0x000000000380E000-memory.dmp
memory/1828-8-0x0000000000630000-0x000000000063F000-memory.dmp
memory/1828-9-0x0000000000630000-0x000000000063F000-memory.dmp
memory/1828-14-0x00000000028F0000-0x0000000002EB8000-memory.dmp
memory/1828-16-0x00007FFAD27F0000-0x00007FFAD29E5000-memory.dmp
memory/1828-120-0x0000000004630000-0x00000000046B2000-memory.dmp
memory/1828-119-0x0000000004630000-0x000000000463A000-memory.dmp
memory/1828-118-0x0000000004630000-0x0000000004698000-memory.dmp
memory/1828-117-0x0000000004630000-0x000000000463A000-memory.dmp
memory/1828-116-0x0000000004630000-0x000000000463B000-memory.dmp
memory/1828-115-0x0000000004630000-0x00000000046A0000-memory.dmp
memory/1828-20-0x00007FFAD27F0000-0x00007FFAD29E5000-memory.dmp
memory/1828-113-0x0000000004630000-0x000000000463E000-memory.dmp
memory/1828-112-0x0000000004630000-0x000000000463C000-memory.dmp
memory/1828-111-0x0000000004630000-0x0000000004640000-memory.dmp
memory/1828-24-0x00007FFAD27F0000-0x00007FFAD29E5000-memory.dmp
memory/1828-108-0x00000000045F0000-0x0000000004616000-memory.dmp
memory/1828-107-0x00000000028F0000-0x0000000002EB8000-memory.dmp
memory/1828-104-0x00000000041B0000-0x000000000427C000-memory.dmp
memory/1828-102-0x0000000004030000-0x000000000404E000-memory.dmp
memory/1828-100-0x0000000004030000-0x000000000404E000-memory.dmp
memory/1828-27-0x0000000002EC0000-0x0000000003098000-memory.dmp
memory/1828-95-0x0000000003EC0000-0x000000000401A000-memory.dmp
memory/1828-53-0x0000000003810000-0x0000000003D83000-memory.dmp
memory/1828-30-0x0000000002EC0000-0x0000000003098000-memory.dmp
memory/1828-87-0x0000000003DF0000-0x0000000003EA5000-memory.dmp
memory/1828-84-0x0000000003DF0000-0x0000000003EA5000-memory.dmp
memory/1828-35-0x00007FFAD27F0000-0x00007FFAD29E5000-memory.dmp
memory/1828-81-0x0000000000630000-0x000000000063F000-memory.dmp
memory/1828-80-0x0000000180000000-0x000000018019B000-memory.dmp
memory/1828-79-0x00000000028F0000-0x0000000002EB8000-memory.dmp
memory/1828-77-0x0000000003DA0000-0x0000000003DE1000-memory.dmp
memory/1828-75-0x0000000003DA0000-0x0000000003DE1000-memory.dmp
memory/1828-19-0x00000000028F0000-0x0000000002EB8000-memory.dmp
memory/1828-12-0x0000000140000000-0x0000000141317000-memory.dmp
memory/1828-67-0x0000000002370000-0x000000000238B000-memory.dmp
memory/1828-65-0x0000000002370000-0x000000000238B000-memory.dmp
memory/1828-13-0x00007FFAD288D000-0x00007FFAD288E000-memory.dmp
memory/1828-61-0x00000000022E0000-0x000000000236D000-memory.dmp
memory/1828-59-0x00000000022E0000-0x000000000236D000-memory.dmp
memory/1828-2-0x0000000180000000-0x000000018019B000-memory.dmp
memory/1828-47-0x00007FFAD27F0000-0x00007FFAD29E5000-memory.dmp
memory/1828-36-0x00007FFAD27F0000-0x00007FFAD29E5000-memory.dmp
memory/1828-173-0x0000000003810000-0x0000000003D83000-memory.dmp
memory/1828-180-0x0000000003EC0000-0x000000000401A000-memory.dmp
memory/1828-166-0x0000000140000000-0x0000000141317000-memory.dmp
memory/1828-176-0x0000000002390000-0x000000000239C000-memory.dmp
memory/1828-175-0x0000000002370000-0x000000000238B000-memory.dmp
memory/1828-172-0x00000000030A0000-0x000000000380E000-memory.dmp
memory/1828-170-0x00000000028F0000-0x0000000002EB8000-memory.dmp
memory/1828-167-0x0000000000A80000-0x0000000000B1B000-memory.dmp
memory/1828-182-0x00007FFAD27F0000-0x00007FFAD29E5000-memory.dmp
memory/1828-183-0x00000000030A0000-0x000000000380E000-memory.dmp
memory/1828-184-0x00007FFAD27F0000-0x00007FFAD29E5000-memory.dmp
memory/1828-185-0x00000000041B0000-0x0000000004280000-memory.dmp
memory/1828-186-0x0000000004870000-0x00000000048F5000-memory.dmp
memory/1828-187-0x00007FFAD27F0000-0x00007FFAD29E5000-memory.dmp
memory/1828-188-0x0000000003810000-0x0000000003D83000-memory.dmp
memory/1828-189-0x00000000045F0000-0x0000000004617000-memory.dmp
memory/1828-197-0x0000000003810000-0x0000000003D83000-memory.dmp
memory/1828-196-0x00000000030A0000-0x000000000380E000-memory.dmp
memory/1828-212-0x00000000030A0000-0x000000000380E000-memory.dmp
memory/1828-213-0x0000000003810000-0x0000000003D83000-memory.dmp
memory/1828-229-0x0000000003810000-0x0000000003D83000-memory.dmp
memory/1828-228-0x00000000030A0000-0x000000000380E000-memory.dmp
memory/1828-222-0x0000000140000000-0x0000000141317000-memory.dmp
memory/1828-245-0x0000000003810000-0x0000000003D83000-memory.dmp
memory/1828-244-0x00000000030A0000-0x000000000380E000-memory.dmp
memory/1828-242-0x00000000028F0000-0x0000000002EB8000-memory.dmp
memory/1828-293-0x0000000003810000-0x0000000003D83000-memory.dmp
memory/1828-292-0x00000000030A0000-0x000000000380E000-memory.dmp
memory/1828-286-0x0000000140000000-0x0000000141317000-memory.dmp
memory/1828-290-0x00000000028F0000-0x0000000002EB8000-memory.dmp
memory/1828-309-0x0000000003810000-0x0000000003D83000-memory.dmp
memory/1828-308-0x00000000030A0000-0x000000000380E000-memory.dmp
memory/1828-325-0x0000000003810000-0x0000000003D83000-memory.dmp
memory/1828-324-0x00000000030A0000-0x000000000380E000-memory.dmp
memory/1828-366-0x0000000140000000-0x0000000141317000-memory.dmp