Analysis
- max time kernel
149s - max time network
95s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
- submitted
24/04/2026, 01:04
General
- Target twistedmacro.exe
- Size 498KB
- Sample260424-bfc4ssay9j
- SHA256 a55e6b3975c4ede51e4d196d0d85f3ca9f003aab29bddc584d59382f7480bd59
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 1 IoCs
- Suspicious use of SendNotifyMessage 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\twistedmacro.exe"C:\Users\Admin\AppData\Local\Temp\twistedmacro.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
settings.ini
memory/3892-18-0x0000000140000000-0x000000014014A000-memory.dmp
memory/3892-10-0x0000000140000000-0x000000014014A000-memory.dmp
memory/3892-15-0x0000000140000000-0x000000014014A000-memory.dmp
memory/3892-16-0x0000000140000000-0x000000014014A000-memory.dmp
memory/3892-17-0x0000000140000000-0x000000014014A000-memory.dmp
memory/3892-0-0x0000000140000000-0x000000014014A000-memory.dmp
memory/3892-19-0x0000000140000000-0x000000014014A000-memory.dmp
memory/3892-23-0x0000000140000000-0x000000014014A000-memory.dmp
memory/3892-24-0x0000000140000000-0x000000014014A000-memory.dmp
memory/3892-25-0x0000000140000000-0x000000014014A000-memory.dmp
memory/3892-26-0x0000000140000000-0x000000014014A000-memory.dmp
memory/3892-27-0x0000000140000000-0x000000014014A000-memory.dmp
memory/3892-31-0x0000000140000000-0x000000014014A000-memory.dmp
memory/3892-32-0x0000000140000000-0x000000014014A000-memory.dmp