Analysis

  • user interaction
    yes
  • max time kernel
    68s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260130-en
  • resource tags

    arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    25/04/2026, 21:55

General

  • Target
    vector.exe
  • Size 28.6MB
  • Sample260425-1synpsat5x
  • SHA256 09fd6cec11ca5671b8c75fd8906af88bd2604ee2acb5151526e698ec55e37bbd
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 7 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\vector.exe
    "C:\Users\Admin\AppData\Local\Temp\vector.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3440

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/3440-0-0x000000014025B000-0x0000000141363000-memory.dmp

        memory/3440-2-0x00007FFCDBB40000-0x00007FFCDBB42000-memory.dmp

        memory/3440-1-0x00007FFCDBB30000-0x00007FFCDBB32000-memory.dmp

        memory/3440-3-0x0000000140000000-0x0000000143000000-memory.dmp

        memory/3440-36-0x0000000002240000-0x0000000002241000-memory.dmp

        memory/3440-37-0x0000000140000000-0x0000000143000000-memory.dmp

        memory/3440-35-0x0000000002230000-0x0000000002231000-memory.dmp

        memory/3440-34-0x0000000002220000-0x0000000002221000-memory.dmp

        memory/3440-33-0x0000000002210000-0x0000000002211000-memory.dmp

        memory/3440-32-0x0000000002200000-0x0000000002201000-memory.dmp

        memory/3440-31-0x00000000021F0000-0x00000000021F1000-memory.dmp

        memory/3440-30-0x00000000021E0000-0x00000000021E1000-memory.dmp

        memory/3440-29-0x00000000021D0000-0x00000000021D1000-memory.dmp

        memory/3440-28-0x00000000021C0000-0x00000000021C1000-memory.dmp

        memory/3440-27-0x00000000021B0000-0x00000000021B1000-memory.dmp

        memory/3440-26-0x00000000021A0000-0x00000000021A1000-memory.dmp

        memory/3440-25-0x0000000002190000-0x0000000002191000-memory.dmp

        memory/3440-24-0x0000000002180000-0x0000000002181000-memory.dmp

        memory/3440-23-0x0000000002170000-0x0000000002171000-memory.dmp

        memory/3440-22-0x0000000002160000-0x0000000002161000-memory.dmp

        memory/3440-21-0x0000000002150000-0x0000000002151000-memory.dmp

        memory/3440-20-0x0000000002140000-0x0000000002141000-memory.dmp

        memory/3440-19-0x0000000002130000-0x0000000002131000-memory.dmp

        memory/3440-18-0x0000000002120000-0x0000000002121000-memory.dmp

        memory/3440-17-0x0000000002110000-0x0000000002111000-memory.dmp

        memory/3440-16-0x0000000000950000-0x0000000000951000-memory.dmp

        memory/3440-15-0x0000000000940000-0x0000000000941000-memory.dmp

        memory/3440-14-0x0000000000930000-0x0000000000931000-memory.dmp

        memory/3440-13-0x0000000000920000-0x0000000000921000-memory.dmp

        memory/3440-12-0x0000000000910000-0x0000000000911000-memory.dmp

        memory/3440-11-0x0000000000900000-0x0000000000901000-memory.dmp

        memory/3440-10-0x00000000008F0000-0x00000000008F1000-memory.dmp

        memory/3440-9-0x00000000008E0000-0x00000000008E1000-memory.dmp

        memory/3440-8-0x00000000008D0000-0x00000000008D1000-memory.dmp

        memory/3440-7-0x00000000008B0000-0x00000000008B1000-memory.dmp

        memory/3440-38-0x0000000140000000-0x0000000143000000-memory.dmp

        memory/3440-40-0x0000000002670000-0x000000000267C000-memory.dmp

        memory/3440-39-0x0000000140000000-0x0000000143000000-memory.dmp

        memory/3440-41-0x000000014025B000-0x0000000141363000-memory.dmp

        memory/3440-42-0x0000000140000000-0x0000000143000000-memory.dmp

        memory/3440-43-0x0000000140000000-0x0000000143000000-memory.dmp

        memory/3440-44-0x0000000140000000-0x0000000143000000-memory.dmp

        memory/3440-46-0x0000000140000000-0x0000000143000000-memory.dmp

        memory/3440-48-0x0000000140000000-0x0000000143000000-memory.dmp

        memory/3440-50-0x0000000140000000-0x0000000143000000-memory.dmp

        memory/3440-52-0x0000000140000000-0x0000000143000000-memory.dmp