Analysis
- max time kernel
149s - max time network
161s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
- submitted
26/04/2026, 15:21
General
- Target tools/windows/macguest.exe
- Size 38KB
- Sample260426-srtpcsc12p
- SHA256 949642c2f2a45d0a0a8fcb24643027c2fe664e9048615f8e8115338b1f0a09db
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 1 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\tools\windows\macguest.exe"C:\Users\Admin\AppData\Local\Temp\tools\windows\macguest.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
__PSScriptPolicyTest_3m5p12me.3x4.ps1
memory/3964-0-0x0000000000C50000-0x0000000000C5E000-memory.dmp
memory/3964-8-0x000000001CC30000-0x000000001CC40000-memory.dmp
memory/3964-9-0x0000000001AE0000-0x0000000001B02000-memory.dmp
memory/3964-10-0x000000001CC30000-0x000000001CC40000-memory.dmp
memory/3964-11-0x000000001CC30000-0x000000001CC40000-memory.dmp
memory/3964-13-0x000000001CC30000-0x000000001CC40000-memory.dmp
memory/3964-12-0x000000001D440000-0x000000001DB7F000-memory.dmp