Analysis
- max time kernel
149s - max time network
148s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
- submitted
24/04/2026, 23:17
General
- Target _f82d272a52c56f65d66ac665f3074639b93b61c094d27c75e0c77b9baffe896f.exe
- Size 716KB
- Sample260424-29pmssft3r
- SHA256 f82d272a52c56f65d66ac665f3074639b93b61c094d27c75e0c77b9baffe896f
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
- Adds Run key to start application 2 TTPs 1 IoCs
- Modifies system certificate store 2 TTPs 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\_f82d272a52c56f65d66ac665f3074639b93b61c094d27c75e0c77b9baffe896f.exe"C:\Users\Admin\AppData\Local\Temp\_f82d272a52c56f65d66ac665f3074639b93b61c094d27c75e0c77b9baffe896f.exe"1⤵
- Adds Run key to start application
- Modifies system certificate store
-
C:\Users\Admin\AppData\Roaming\8d3ip-2ig6v-54p\0eWwfjJD.exeC:\Users\Admin\AppData\Roaming\8d3ip-2ig6v-54p\0eWwfjJD.exe1⤵
- Executes dropped EXE
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
0eWwfjJD.exe
memory/648-34-0x0000000140000000-0x000000014003F000-memory.dmp
memory/648-31-0x0000000140000000-0x000000014003F000-memory.dmp
memory/648-30-0x0000000140000000-0x000000014003F000-memory.dmp
memory/648-32-0x0000000140000000-0x000000014003F000-memory.dmp
memory/648-33-0x0000000140000000-0x000000014003F000-memory.dmp
memory/1900-11-0x0000000140000000-0x000000014003F000-memory.dmp
memory/1900-19-0x000001892B960000-0x000001892B96C000-memory.dmp
memory/1900-18-0x000001892B910000-0x000001892B919000-memory.dmp
memory/1900-17-0x000001892B860000-0x000001892B8CF000-memory.dmp
memory/1900-1-0x0000000140000000-0x000000014003F000-memory.dmp
memory/1900-12-0x0000000140000000-0x000000014003F000-memory.dmp
memory/1900-13-0x0000000140000000-0x000000014003F000-memory.dmp
memory/1900-14-0x0000000140000000-0x000000014003F000-memory.dmp
memory/1900-40-0x000001892B860000-0x000001892B8CF000-memory.dmp