Analysis
- max time kernel
149s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
- submitted
24/04/2026, 23:17
General
- Target _f82d272a52c56f65d66ac665f3074639b93b61c094d27c75e0c77b9baffe896f.exe
- Size 716KB
- Sample260424-29pmssft3r
- SHA256 f82d272a52c56f65d66ac665f3074639b93b61c094d27c75e0c77b9baffe896f
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
- Adds Run key to start application 2 TTPs 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\_f82d272a52c56f65d66ac665f3074639b93b61c094d27c75e0c77b9baffe896f.exe"C:\Users\Admin\AppData\Local\Temp\_f82d272a52c56f65d66ac665f3074639b93b61c094d27c75e0c77b9baffe896f.exe"1⤵
- Adds Run key to start application
-
C:\Users\Admin\AppData\Roaming\rf0jt-jqba0-r7z\0eWwfjJD.exeC:\Users\Admin\AppData\Roaming\rf0jt-jqba0-r7z\0eWwfjJD.exe1⤵
- Executes dropped EXE
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
0eWwfjJD.exe
memory/1244-27-0x00000295C0E10000-0x00000295C0E1C000-memory.dmp
memory/1244-25-0x00000295C0CC0000-0x00000295C0CF0000-memory.dmp
memory/1244-11-0x0000000140000000-0x000000014003F000-memory.dmp
memory/1244-1-0x0000000140000000-0x000000014003F000-memory.dmp
memory/1244-14-0x0000000140000000-0x000000014003F000-memory.dmp
memory/1244-12-0x0000000140000000-0x000000014003F000-memory.dmp
memory/1244-26-0x00000295C0DB0000-0x00000295C0DB8000-memory.dmp
memory/1244-13-0x0000000140000000-0x000000014003F000-memory.dmp
memory/4952-47-0x0000000140000000-0x000000014003F000-memory.dmp
memory/4952-49-0x0000000140000000-0x000000014003F000-memory.dmp
memory/4952-51-0x0000000140000000-0x000000014003F000-memory.dmp
memory/4952-52-0x0000019C8D580000-0x0000019C8D5B0000-memory.dmp
memory/4952-50-0x0000000140000000-0x000000014003F000-memory.dmp
memory/4952-48-0x0000000140000000-0x000000014003F000-memory.dmp