Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
- submitted
29/04/2026, 00:19
General
- Target $_34_.exe
- Size 2.6MB
- Sample260429-ammq5sfv21
- SHA256 c49239aaae1f352f8d831aaafcd51c697a2bb2e0043fc02d521a82e01e00bbbc
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\$_34_.exe"C:\Users\Admin\AppData\Local\Temp\$_34_.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
console.log
console.log
console.log
memory/4448-4-0x000000001C1C0000-0x000000001C2DE000-memory.dmp
memory/4448-10-0x000000001BB80000-0x000000001BB96000-memory.dmp
memory/4448-5-0x000000001C5E0000-0x000000001C5F0000-memory.dmp
memory/4448-6-0x000000001C4A0000-0x000000001C5B2000-memory.dmp
memory/4448-7-0x000000001C7A0000-0x000000001C950000-memory.dmp
memory/4448-8-0x000000001BBA0000-0x000000001BBFE000-memory.dmp
memory/4448-9-0x000000001BC00000-0x000000001BC54000-memory.dmp
memory/4448-0-0x00000000007E0000-0x0000000000A72000-memory.dmp
memory/4448-3-0x000000001C330000-0x000000001C492000-memory.dmp
memory/4448-2-0x000000001D080000-0x000000001DF40000-memory.dmp
memory/4448-29-0x000000001BB60000-0x000000001BB76000-memory.dmp
memory/4448-1-0x000000001BC80000-0x000000001C1BC000-memory.dmp
memory/4448-53-0x0000000001300000-0x000000000130C000-memory.dmp
memory/4448-54-0x000000001B570000-0x000000001B61D000-memory.dmp