Analysis

  • max time kernel
    150s
  • max time network
    139s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260130-en
  • resource tags

    arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    27/04/2026, 22:33

General

  • Target
    3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe
  • Size 1.6MB
  • Sample260427-2gr78aav6z
  • SHA256 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe
    "C:\Users\Admin\AppData\Local\Temp\3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2180

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/2180-0-0x00000251922B0000-0x00000251922C0000-memory.dmp

        memory/2180-1-0x0000025191D20000-0x0000025191D56000-memory.dmp

        memory/2180-2-0x00000251922B0000-0x00000251922C0000-memory.dmp

        memory/2180-3-0x00000251922B0000-0x00000251922C0000-memory.dmp

        memory/2180-4-0x00000251922B0000-0x00000251922C0000-memory.dmp

        memory/2180-5-0x0000025192530000-0x0000025192538000-memory.dmp

        memory/2180-7-0x00000251AED60000-0x00000251AED6E000-memory.dmp

        memory/2180-6-0x00000251AF1B0000-0x00000251AF1E8000-memory.dmp

        memory/2180-12-0x00000251922B0000-0x00000251922C0000-memory.dmp

        memory/2180-13-0x00000251922B0000-0x00000251922C0000-memory.dmp

        memory/2180-14-0x00000251922B0000-0x00000251922C0000-memory.dmp

        memory/2180-15-0x00000251922B0000-0x00000251922C0000-memory.dmp

        memory/2180-18-0x00000251922B0000-0x00000251922C0000-memory.dmp

        memory/2180-17-0x0000025191E90000-0x0000025191E9C000-memory.dmp

        memory/2180-16-0x0000025190160000-0x00000251904D8000-memory.dmp

        memory/2180-21-0x0000025190160000-0x00000251904D8000-memory.dmp

        memory/2180-23-0x0000025190160000-0x00000251904D8000-memory.dmp

        memory/2180-29-0x0000025190160000-0x00000251904D8000-memory.dmp

        memory/2180-35-0x00000251AE8E0000-0x00000251AE8F2000-memory.dmp

        memory/2180-33-0x0000025190160000-0x00000251904D8000-memory.dmp

        memory/2180-45-0x0000025190160000-0x00000251904D8000-memory.dmp

        memory/2180-48-0x0000025190160000-0x00000251904D8000-memory.dmp