Analysis
- max time kernel
898s - max time network
491s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
- submitted
28/05/2026, 05:41
General
- Target latest virus/Setup.exe
- Size 102KB
- Sample260528-gdlk2shx21
- SHA256 7123e1514b939b165985560057fe3c761440a9fff9783a3b84e861fd2888d4ab
Malware Config
Signatures
- Checks SCSI registry key(s) 3 TTPs 4 IoCs
SCSI information is often read in order to detect sandboxing environments.
- Suspicious use of SetWindowsHookEx 2 IoCs
- Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\latest virus\Setup.exe"C:\Users\Admin\AppData\Local\Temp\latest virus\Setup.exe"1⤵
- Checks SCSI registry key(s)
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "ver"2⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "ver"2⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "ver"2⤵
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5924-253-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-254-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-255-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-256-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-257-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-258-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-259-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-260-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-261-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-262-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-263-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-264-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-265-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-266-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-267-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-268-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-269-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-270-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-271-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-272-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-273-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-274-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-275-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-276-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-277-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-278-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-279-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-280-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-281-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-282-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-283-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-284-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-285-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-286-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-287-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-288-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-289-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-290-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-291-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-292-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-293-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-294-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-295-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-296-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-297-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-298-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-299-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-300-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-301-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-302-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-303-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-304-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-305-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-306-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-307-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-308-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-309-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-310-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-311-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-312-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-313-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-314-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-315-0x0000000001FC0000-0x00000000027ED000-memory.dmp
memory/5924-316-0x0000000001FC0000-0x00000000027ED000-memory.dmp