Analysis
- max time kernel
148s - max time network
94s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
- submitted
08/05/2026, 12:48
General
- Target 06c4777276dbdc6f930571e2b1804f15a1b54c8079d6adad49cddf99b28ddb26.exe
- Size 1.2MB
- Sample260508-p14n5scy3m
- SHA256 06c4777276dbdc6f930571e2b1804f15a1b54c8079d6adad49cddf99b28ddb26
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\06c4777276dbdc6f930571e2b1804f15a1b54c8079d6adad49cddf99b28ddb26.exe"C:\Users\Admin\AppData\Local\Temp\06c4777276dbdc6f930571e2b1804f15a1b54c8079d6adad49cddf99b28ddb26.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3680-0-0x0000000002AD0000-0x0000000002AE0000-memory.dmp
memory/3680-1-0x0000000005100000-0x0000000005248000-memory.dmp
memory/3680-2-0x0000000002AD0000-0x0000000002AE0000-memory.dmp
memory/3680-3-0x0000000005250000-0x00000000057F6000-memory.dmp
memory/3680-4-0x0000000004FA0000-0x00000000050E8000-memory.dmp
memory/3680-18-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-24-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-30-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-50-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-53-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-64-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-82-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-104-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-106-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-108-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-102-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-100-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-98-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-96-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-94-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-92-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-90-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-88-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-86-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-84-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-80-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-78-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-76-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-72-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-70-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-68-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-66-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-74-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-63-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-60-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-58-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-56-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-54-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-51-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-48-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-110-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-128-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-124-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-122-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-120-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-118-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-114-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-126-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-116-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-112-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-46-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-44-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-42-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-41-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-38-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-36-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-32-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-34-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-28-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-26-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-22-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-20-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-16-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-14-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-12-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-10-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-8-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-6-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-5-0x0000000004FA0000-0x00000000050E0000-memory.dmp
memory/3680-1759-0x0000000005800000-0x0000000005892000-memory.dmp
memory/3680-1761-0x0000000002AF0000-0x0000000002AF1000-memory.dmp
memory/3680-1760-0x0000000002AD0000-0x0000000002AE0000-memory.dmp
memory/3680-1762-0x00000000059C0000-0x00000000059CA000-memory.dmp
memory/3680-1763-0x0000000002AD0000-0x0000000002AE0000-memory.dmp
memory/3680-1764-0x0000000002AD0000-0x0000000002AE0000-memory.dmp
memory/3680-1765-0x0000000002AD0000-0x0000000002AE0000-memory.dmp
memory/3680-1766-0x0000000002AD0000-0x0000000002AE0000-memory.dmp
memory/3680-1767-0x0000000002AD0000-0x0000000002AE0000-memory.dmp
memory/3680-1768-0x0000000002AD0000-0x0000000002AE0000-memory.dmp