Analysis
- max time kernel
148s - max time network
93s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
- submitted
05/05/2026, 04:29
General
- Target Class of '09/Launch Class of '09.lnk
- Size 985B
- Sample260505-e4ppaagv3t
- SHA256 d41c201a9b6b12cba96d153c107905f2b1c9b2af3b0a0cd8a2c1e1bcd5b17176
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Suspicious use of SetWindowsHookEx 2 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\Class of '09\Launch Class of '09.lnk"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\Class of '09\Class_Of_09.exe"C:\Users\Admin\AppData\Local\Temp\Class of '09\Class_Of_09.exe"2⤵
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2288-160-0x00007FFFFE740000-0x00007FFFFF77A000-memory.dmp
memory/2288-170-0x00007FF80EA60000-0x00007FF80F079000-memory.dmp
memory/2288-130-0x00000000022C0000-0x00000000023AA000-memory.dmp
memory/2288-129-0x00007FF80EA60000-0x00007FF80F079000-memory.dmp
memory/2288-131-0x00000000023C0000-0x00000000023CC000-memory.dmp
memory/2288-133-0x000000000BA20000-0x000000000BA32000-memory.dmp
memory/2288-132-0x00007FF817D30000-0x00007FF817D3D000-memory.dmp
memory/2288-128-0x00007FFFFE740000-0x00007FFFFF77A000-memory.dmp
memory/2288-137-0x00007FF80EA60000-0x00007FF80F079000-memory.dmp
memory/2288-136-0x00007FFFFE740000-0x00007FFFFF77A000-memory.dmp
memory/2288-145-0x00007FF80EA60000-0x00007FF80F079000-memory.dmp
memory/2288-144-0x00007FFFFE740000-0x00007FFFFF77A000-memory.dmp
memory/2288-233-0x00007FFFFE740000-0x00007FFFFF77A000-memory.dmp
memory/2288-153-0x00007FF80EA60000-0x00007FF80F079000-memory.dmp
memory/2288-152-0x00007FFFFE740000-0x00007FFFFF77A000-memory.dmp
memory/2288-161-0x00007FF80EA60000-0x00007FF80F079000-memory.dmp
memory/2288-127-0x0000000140000000-0x0000000140021000-memory.dmp
memory/2288-234-0x00007FF80EA60000-0x00007FF80F079000-memory.dmp
memory/2288-169-0x00007FFFFE740000-0x00007FFFFF77A000-memory.dmp
memory/2288-178-0x00007FF80EA60000-0x00007FF80F079000-memory.dmp
memory/2288-177-0x00007FFFFE740000-0x00007FFFFF77A000-memory.dmp
memory/2288-186-0x00007FF80EA60000-0x00007FF80F079000-memory.dmp
memory/2288-185-0x00007FFFFE740000-0x00007FFFFF77A000-memory.dmp
memory/2288-194-0x00007FF80EA60000-0x00007FF80F079000-memory.dmp
memory/2288-193-0x00007FFFFE740000-0x00007FFFFF77A000-memory.dmp
memory/2288-202-0x00007FF80EA60000-0x00007FF80F079000-memory.dmp
memory/2288-201-0x00007FFFFE740000-0x00007FFFFF77A000-memory.dmp
memory/2288-210-0x00007FF80EA60000-0x00007FF80F079000-memory.dmp
memory/2288-209-0x00007FFFFE740000-0x00007FFFFF77A000-memory.dmp
memory/2288-218-0x00007FF80EA60000-0x00007FF80F079000-memory.dmp
memory/2288-217-0x00007FFFFE740000-0x00007FFFFF77A000-memory.dmp
memory/2288-226-0x00007FF80EA60000-0x00007FF80F079000-memory.dmp
memory/2288-225-0x00007FFFFE740000-0x00007FFFFF77A000-memory.dmp
memory/3292-126-0x000001487F980000-0x000001487FA6A000-memory.dmp
memory/3292-150-0x000001487F980000-0x000001487FA6A000-memory.dmp