Analysis
- max time kernel
149s - max time network
137s - platform
windows11-21h2_x64 - resource
win11-20250610-en - resource tags
- submitted
09/05/2026, 00:59
General
- Target Lifenz Booster Utility.exe
- Size 215KB
- Sample260509-bb275act9m
- SHA256 8e511044d70dc3b2dd33a48e13741f9739695d4e10feffe915361bfc1ceae4e9
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 1 IoCs
- Suspicious use of AdjustPrivilegeToken 64 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Lifenz Booster Utility.exe"C:\Users\Admin\AppData\Local\Temp\Lifenz Booster Utility.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
__PSScriptPolicyTest_uonxlp3j.1gz.ps1
memory/3416-40-0x000000001D590000-0x000000001D598000-memory.dmp
memory/3416-42-0x000000001D5D0000-0x000000001D5DA000-memory.dmp
memory/3416-8-0x000000001B0E0000-0x000000001B102000-memory.dmp
memory/3416-16-0x00007FF4FABA0000-0x00007FF4FABB0000-memory.dmp
memory/3416-17-0x000000001D070000-0x000000001D08C000-memory.dmp
memory/3416-18-0x000000001D090000-0x000000001D143000-memory.dmp
memory/3416-19-0x000000001D150000-0x000000001D15A000-memory.dmp
memory/3416-20-0x000000001D190000-0x000000001D1BA000-memory.dmp
memory/3416-41-0x000000001D5A0000-0x000000001D5A6000-memory.dmp
memory/3416-22-0x0000000002670000-0x0000000002680000-memory.dmp
memory/3416-29-0x000000001D5B0000-0x000000001D5CC000-memory.dmp
memory/3416-30-0x000000001D5D0000-0x000000001D5DA000-memory.dmp
memory/3416-31-0x000000001D5E0000-0x000000001D5EA000-memory.dmp
memory/3416-32-0x0000000002670000-0x0000000002680000-memory.dmp
memory/3416-7-0x0000000002670000-0x0000000002680000-memory.dmp
memory/3416-39-0x000000001D5B0000-0x000000001D5CA000-memory.dmp
memory/3416-21-0x000000001D190000-0x000000001D1B4000-memory.dmp
memory/3416-0-0x00000000003A0000-0x00000000003DC000-memory.dmp
memory/3416-44-0x0000000002670000-0x0000000002680000-memory.dmp
memory/3416-45-0x000000001E010000-0x000000001E018000-memory.dmp
memory/3416-47-0x000000001E140000-0x000000001E14E000-memory.dmp
memory/3416-46-0x000000001E7A0000-0x000000001E7D8000-memory.dmp
memory/3416-48-0x0000000002670000-0x0000000002680000-memory.dmp
memory/3416-49-0x0000000002670000-0x0000000002680000-memory.dmp
memory/3416-50-0x00007FF4FABA0000-0x00007FF4FABB0000-memory.dmp
memory/3416-51-0x0000000000CF0000-0x0000000000CFC000-memory.dmp
memory/3416-52-0x0000000002610000-0x0000000002622000-memory.dmp
memory/3416-54-0x0000000002670000-0x0000000002680000-memory.dmp
memory/3416-53-0x000000001B3E0000-0x000000001BB8E000-memory.dmp
memory/3416-55-0x0000000002670000-0x0000000002680000-memory.dmp
memory/3416-57-0x0000000002670000-0x0000000002680000-memory.dmp
memory/3416-58-0x0000000002670000-0x0000000002680000-memory.dmp