Analysis
- user interaction
yes - max time kernel
125s - max time network
129s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260130-en - resource tags
- submitted
20/04/2026, 18:38
General
- Target hm-mag-v2.5.9.exe
- Size 68.5MB
- Sample260420-xaamdaev2s
- SHA256 b68dffeb5392ad89b515518fcf1678962cb5ae30c8f4293ec7743989f5775abd
Malware Config
Signatures
- Loads dropped DLL 26 IoCs
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\hm-mag-v2.5.9.exe"C:\Users\Admin\AppData\Local\Temp\hm-mag-v2.5.9.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: AddClipboardFormatListener
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
evb5705.tmp
evb5716.tmp
evb5727.tmp
evb57F3.tmp
evb5813.tmp
evb594C.tmp
evb5A86.tmp
evb5A97.tmp
evb5A99.tmp
evb5AA9.tmp
evb5B27.tmp
evb5B28.tmp
evb5B48.tmp
evb5B59.tmp
evb5BE7.tmp
evb5BF8.tmp
evb5BF9.tmp
evb5C0A.tmp
evb5C0B.tmp
evb5C0C.tmp
evb5C1E.tmp
evb5C2E.tmp
evb5C2F.tmp
memory/4888-79-0x0000000003DB0000-0x0000000003DF1000-memory.dmp
memory/4888-52-0x0000000180000000-0x000000018019B000-memory.dmp
memory/4888-56-0x0000000002850000-0x0000000002E18000-memory.dmp
memory/4888-53-0x00000000006F0000-0x00000000006FF000-memory.dmp
memory/4888-46-0x0000000003770000-0x0000000003CE3000-memory.dmp
memory/4888-44-0x00007FFC05F10000-0x00007FFC06108000-memory.dmp
memory/4888-39-0x0000000003000000-0x000000000376E000-memory.dmp
memory/4888-35-0x0000000003000000-0x000000000376E000-memory.dmp
memory/4888-121-0x0000000005150000-0x00000000051D2000-memory.dmp
memory/4888-120-0x0000000005150000-0x000000000515A000-memory.dmp
memory/4888-119-0x0000000005150000-0x00000000051B8000-memory.dmp
memory/4888-118-0x0000000005150000-0x000000000515A000-memory.dmp
memory/4888-117-0x0000000005150000-0x000000000515B000-memory.dmp
memory/4888-116-0x0000000005150000-0x00000000051C0000-memory.dmp
memory/4888-115-0x0000000005150000-0x000000000515C000-memory.dmp
memory/4888-114-0x0000000005150000-0x000000000515E000-memory.dmp
memory/4888-113-0x0000000005150000-0x000000000515C000-memory.dmp
memory/4888-112-0x0000000005150000-0x0000000005160000-memory.dmp
memory/4888-29-0x0000000002E20000-0x0000000002FF8000-memory.dmp
memory/4888-109-0x0000000005110000-0x0000000005136000-memory.dmp
memory/4888-108-0x0000000003770000-0x0000000003CE3000-memory.dmp
memory/4888-105-0x00000000041C0000-0x000000000428C000-memory.dmp
memory/4888-103-0x0000000004040000-0x000000000405E000-memory.dmp
memory/4888-101-0x0000000004040000-0x000000000405E000-memory.dmp
memory/4888-96-0x0000000003ED0000-0x000000000402A000-memory.dmp
memory/4888-93-0x0000000003ED0000-0x000000000402A000-memory.dmp
memory/4888-34-0x00007FFC05F10000-0x00007FFC06108000-memory.dmp
memory/4888-88-0x0000000003E00000-0x0000000003EB5000-memory.dmp
memory/4888-85-0x0000000003E00000-0x0000000003EB5000-memory.dmp
memory/4888-22-0x00007FFC05F10000-0x00007FFC06108000-memory.dmp
memory/4888-82-0x0000000003000000-0x000000000376E000-memory.dmp
memory/4888-2-0x0000000140000000-0x0000000141317000-memory.dmp
memory/4888-77-0x0000000003DB0000-0x0000000003DF1000-memory.dmp
memory/4888-15-0x0000000002850000-0x0000000002E18000-memory.dmp
memory/4888-14-0x00007FFC05F10000-0x00007FFC06108000-memory.dmp
memory/4888-69-0x0000000003D80000-0x0000000003D9B000-memory.dmp
memory/4888-67-0x0000000003D80000-0x0000000003D9B000-memory.dmp
memory/4888-13-0x00007FFC05FAD000-0x00007FFC05FAE000-memory.dmp
memory/4888-63-0x0000000003CF0000-0x0000000003D7D000-memory.dmp
memory/4888-57-0x0000000002E20000-0x0000000002FF8000-memory.dmp
memory/4888-50-0x0000000003770000-0x0000000003CE3000-memory.dmp
memory/4888-61-0x0000000003CF0000-0x0000000003D7D000-memory.dmp
memory/4888-3-0x0000000180000000-0x000000018019B000-memory.dmp
memory/4888-81-0x0000000002850000-0x0000000002E18000-memory.dmp
memory/4888-51-0x00007FFC05F10000-0x00007FFC06108000-memory.dmp
memory/4888-9-0x00000000006F0000-0x00000000006FF000-memory.dmp
memory/4888-26-0x0000000002E20000-0x0000000002FF8000-memory.dmp
memory/4888-10-0x00000000006F0000-0x00000000006FF000-memory.dmp
memory/4888-19-0x0000000002850000-0x0000000002E18000-memory.dmp
memory/4888-146-0x0000000003E00000-0x0000000003EB5000-memory.dmp
memory/4888-149-0x00007FFC05F10000-0x00007FFC06108000-memory.dmp
memory/4888-148-0x0000000004040000-0x000000000405E000-memory.dmp
memory/4888-147-0x0000000003ED0000-0x000000000402A000-memory.dmp
memory/4888-145-0x0000000003DB0000-0x0000000003DF1000-memory.dmp
memory/4888-144-0x0000000003DA0000-0x0000000003DA9000-memory.dmp
memory/4888-143-0x00000000022F0000-0x00000000022FC000-memory.dmp
memory/4888-142-0x0000000003D80000-0x0000000003D9B000-memory.dmp
memory/4888-161-0x0000000003CF0000-0x0000000003D7D000-memory.dmp
memory/4888-160-0x0000000005390000-0x0000000005415000-memory.dmp
memory/4888-159-0x0000000005370000-0x000000000537C000-memory.dmp
memory/4888-158-0x00000000052F0000-0x0000000005359000-memory.dmp
memory/4888-157-0x00000000052D0000-0x00000000052DC000-memory.dmp
memory/4888-156-0x0000000005260000-0x00000000052BA000-memory.dmp
memory/4888-155-0x0000000005240000-0x000000000524D000-memory.dmp
memory/4888-154-0x00000000051B0000-0x0000000005222000-memory.dmp
memory/4888-153-0x0000000005190000-0x000000000519E000-memory.dmp
memory/4888-152-0x0000000005170000-0x0000000005180000-memory.dmp
memory/4888-151-0x0000000005150000-0x000000000515E000-memory.dmp
memory/4888-150-0x00000000041C0000-0x0000000004290000-memory.dmp
memory/4888-162-0x0000000005110000-0x0000000005137000-memory.dmp
memory/4888-170-0x0000000003770000-0x0000000003CE3000-memory.dmp
memory/4888-177-0x0000000003ED0000-0x000000000402A000-memory.dmp
memory/4888-169-0x0000000003000000-0x000000000376E000-memory.dmp
memory/4888-167-0x0000000002850000-0x0000000002E18000-memory.dmp
memory/4888-168-0x0000000002E20000-0x0000000002FF8000-memory.dmp
memory/4888-165-0x0000000180000000-0x000000018019B000-memory.dmp
memory/4888-163-0x0000000140000000-0x0000000141317000-memory.dmp
memory/4888-164-0x0000000000600000-0x00000000006B0000-memory.dmp
memory/4888-166-0x00000000006F0000-0x00000000006FF000-memory.dmp
memory/4888-179-0x00007FFC05F10000-0x00007FFC06108000-memory.dmp
memory/4888-180-0x00007FFC05F10000-0x00007FFC06108000-memory.dmp
memory/4888-181-0x00000000041C0000-0x0000000004290000-memory.dmp
memory/4888-182-0x0000000005110000-0x0000000005137000-memory.dmp
memory/4888-222-0x0000000003770000-0x0000000003CE3000-memory.dmp
memory/4888-221-0x0000000003000000-0x000000000376E000-memory.dmp
memory/4888-215-0x0000000140000000-0x0000000141317000-memory.dmp
memory/4888-216-0x0000000000600000-0x00000000006B0000-memory.dmp
memory/4888-279-0x0000000140000000-0x0000000141317000-memory.dmp