Analysis
- user interaction
yes - max time kernel
144s - max time network
98s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
- submitted
20/04/2026, 18:38
General
- Target hm-mag-v2.5.9.exe
- Size 68.5MB
- Sample260420-xaamdaev2s
- SHA256 b68dffeb5392ad89b515518fcf1678962cb5ae30c8f4293ec7743989f5775abd
Malware Config
Signatures
- Loads dropped DLL 26 IoCs
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\hm-mag-v2.5.9.exe"C:\Users\Admin\AppData\Local\Temp\hm-mag-v2.5.9.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
evb5A51.tmp
evb5A71.tmp
evb5A82.tmp
evb5B5E.tmp
evb5B7E.tmp
evb5C4A.tmp
evb5D64.tmp
evb5D75.tmp
evb5D76.tmp
evb5D87.tmp
evb5DA7.tmp
evb670E.tmp
evb671F.tmp
evb673F.tmp
evb6750.tmp
evb677F.tmp
evb6791.tmp
evb6792.tmp
evb67A3.tmp
evb67A4.tmp
evb67B4.tmp
evb67C6.tmp
evb67C8.tmp
memory/3632-143-0x0000000004880000-0x000000000488E000-memory.dmp
memory/3632-123-0x0000000004880000-0x000000000488C000-memory.dmp
memory/3632-80-0x0000000000770000-0x000000000078B000-memory.dmp
memory/3632-73-0x0000000003030000-0x0000000003208000-memory.dmp
memory/3632-81-0x0000000000790000-0x000000000079C000-memory.dmp
memory/3632-69-0x0000000000770000-0x000000000078B000-memory.dmp
memory/3632-67-0x0000000000770000-0x000000000078B000-memory.dmp
memory/3632-82-0x0000000002400000-0x0000000002441000-memory.dmp
memory/3632-63-0x0000000002370000-0x00000000023FD000-memory.dmp
memory/3632-62-0x0000000002370000-0x00000000023FD000-memory.dmp
memory/3632-59-0x00007FF88D0A0000-0x00007FF88D2A9000-memory.dmp
memory/3632-53-0x0000000003980000-0x0000000003EF3000-memory.dmp
memory/3632-48-0x0000000000710000-0x000000000071F000-memory.dmp
memory/3632-47-0x0000000180000000-0x000000018019B000-memory.dmp
memory/3632-83-0x0000000002370000-0x00000000023FD000-memory.dmp
memory/3632-36-0x00007FF88D0A0000-0x00007FF88D2A9000-memory.dmp
memory/3632-30-0x0000000003030000-0x0000000003208000-memory.dmp
memory/3632-26-0x0000000003030000-0x0000000003208000-memory.dmp
memory/3632-84-0x00000000007B0000-0x00000000007B9000-memory.dmp
memory/3632-22-0x00007FF88D0A0000-0x00007FF88D2A9000-memory.dmp
memory/3632-19-0x0000000002A60000-0x0000000003028000-memory.dmp
memory/3632-13-0x00007FF88D144000-0x00007FF88D145000-memory.dmp
memory/3632-87-0x0000000002400000-0x0000000002441000-memory.dmp
memory/3632-85-0x0000000002400000-0x0000000002441000-memory.dmp
memory/3632-89-0x0000000002A60000-0x0000000003028000-memory.dmp
memory/3632-106-0x0000000003F00000-0x000000000405A000-memory.dmp
memory/3632-112-0x0000000004070000-0x000000000408E000-memory.dmp
memory/3632-79-0x0000000003980000-0x0000000003EF3000-memory.dmp
memory/3632-117-0x0000000004840000-0x0000000004866000-memory.dmp
memory/3632-49-0x0000000003980000-0x0000000003EF3000-memory.dmp
memory/3632-156-0x0000000004070000-0x000000000408E000-memory.dmp
memory/3632-57-0x0000000002A60000-0x0000000003028000-memory.dmp
memory/3632-41-0x0000000003210000-0x000000000397E000-memory.dmp
memory/3632-147-0x00000000048E0000-0x0000000004952000-memory.dmp
memory/3632-146-0x00000000048C0000-0x00000000048CE000-memory.dmp
memory/3632-145-0x00000000048A0000-0x00000000048B0000-memory.dmp
memory/3632-37-0x0000000003210000-0x000000000397E000-memory.dmp
memory/3632-2-0x0000000180000000-0x000000018019B000-memory.dmp
memory/3632-142-0x0000000004840000-0x0000000004867000-memory.dmp
memory/3632-141-0x0000000004200000-0x00000000042D0000-memory.dmp
memory/3632-35-0x00007FF88D0A0000-0x00007FF88D2A9000-memory.dmp
memory/3632-29-0x00007FF88D0A0000-0x00007FF88D2A9000-memory.dmp
memory/3632-18-0x00007FF88D0A0000-0x00007FF88D2A9000-memory.dmp
memory/3632-129-0x0000000004880000-0x0000000004902000-memory.dmp
memory/3632-128-0x0000000004880000-0x000000000488A000-memory.dmp
memory/3632-127-0x0000000004880000-0x00000000048E8000-memory.dmp
memory/3632-126-0x0000000004880000-0x000000000488A000-memory.dmp
memory/3632-125-0x0000000004880000-0x000000000488B000-memory.dmp
memory/3632-124-0x0000000004880000-0x00000000048F0000-memory.dmp
memory/3632-78-0x0000000003210000-0x000000000397E000-memory.dmp
memory/3632-122-0x0000000004880000-0x000000000488E000-memory.dmp
memory/3632-121-0x0000000004880000-0x000000000488C000-memory.dmp
memory/3632-120-0x0000000004880000-0x0000000004890000-memory.dmp
memory/3632-14-0x0000000002A60000-0x0000000003028000-memory.dmp
memory/3632-114-0x0000000004200000-0x00000000042CC000-memory.dmp
memory/3632-110-0x0000000004070000-0x000000000408E000-memory.dmp
memory/3632-109-0x0000000002450000-0x0000000002505000-memory.dmp
memory/3632-12-0x0000000140000000-0x0000000141317000-memory.dmp
memory/3632-103-0x0000000003F00000-0x000000000405A000-memory.dmp
memory/3632-100-0x0000000003F00000-0x000000000405A000-memory.dmp
memory/3632-9-0x0000000000710000-0x000000000071F000-memory.dmp
memory/3632-95-0x0000000002450000-0x0000000002505000-memory.dmp
memory/3632-92-0x0000000002450000-0x0000000002505000-memory.dmp
memory/3632-8-0x0000000000710000-0x000000000071F000-memory.dmp
memory/3632-162-0x0000000004A00000-0x0000000004A0C000-memory.dmp
memory/3632-163-0x0000000004A20000-0x0000000004A89000-memory.dmp
memory/3632-161-0x0000000004AC0000-0x0000000004B45000-memory.dmp
memory/3632-160-0x0000000004AA0000-0x0000000004AAC000-memory.dmp
memory/3632-159-0x0000000004990000-0x00000000049EA000-memory.dmp
memory/3632-158-0x0000000004970000-0x000000000497D000-memory.dmp
memory/3632-157-0x00007FF88D0A0000-0x00007FF88D2A9000-memory.dmp
memory/3632-164-0x0000000140000000-0x0000000141317000-memory.dmp
memory/3632-165-0x00007FF88D0A0000-0x00007FF88D2A9000-memory.dmp
memory/3632-166-0x0000000180000000-0x000000018019B000-memory.dmp
memory/3632-167-0x00007FF88D0A0000-0x00007FF88D2A9000-memory.dmp
memory/3632-168-0x0000000000710000-0x000000000071F000-memory.dmp
memory/3632-169-0x0000000002A60000-0x0000000003028000-memory.dmp
memory/3632-170-0x0000000003030000-0x0000000003208000-memory.dmp
memory/3632-171-0x0000000003210000-0x000000000397E000-memory.dmp
memory/3632-172-0x0000000003980000-0x0000000003EF3000-memory.dmp
memory/3632-175-0x0000000002400000-0x0000000002441000-memory.dmp
memory/3632-174-0x0000000000790000-0x000000000079C000-memory.dmp
memory/3632-173-0x0000000000770000-0x000000000078B000-memory.dmp
memory/3632-176-0x0000000002370000-0x00000000023FD000-memory.dmp
memory/3632-177-0x00000000007B0000-0x00000000007B9000-memory.dmp
memory/3632-179-0x0000000000620000-0x000000000067D000-memory.dmp
memory/3632-192-0x0000000003F00000-0x000000000405A000-memory.dmp
memory/3632-178-0x0000000140000000-0x0000000141317000-memory.dmp
memory/3632-184-0x0000000003210000-0x000000000397E000-memory.dmp
memory/3632-182-0x0000000002A60000-0x0000000003028000-memory.dmp
memory/3632-194-0x0000000004200000-0x00000000042D0000-memory.dmp
memory/3632-195-0x0000000004840000-0x0000000004867000-memory.dmp
memory/3632-196-0x00007FF88D0A0000-0x00007FF88D2A9000-memory.dmp
memory/3632-236-0x0000000003980000-0x0000000003EF3000-memory.dmp
memory/3632-235-0x0000000003210000-0x000000000397E000-memory.dmp
memory/3632-229-0x0000000140000000-0x0000000141317000-memory.dmp
memory/3632-293-0x0000000140000000-0x0000000141317000-memory.dmp
memory/3632-373-0x0000000140000000-0x0000000141317000-memory.dmp
memory/3632-389-0x0000000140000000-0x0000000141317000-memory.dmp