Analysis
- user interaction
yes - max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
29/05/2026, 04:15
General
- Target wormGPT.exe
- Size 655KB
- Sample260529-evbq3acy61
- SHA256 e49ea69ab70a8c2392a422ab1bb12d52aedab68e57aa6735e95ac9c26634cab5
Malware Config
Signatures
- Adds Run key to start application 2 TTPs 2 IoCs
- Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\wormGPT.exe"C:\Users\Admin\AppData\Local\Temp\wormGPT.exe"1⤵
- Adds Run key to start application
- Suspicious use of SetWindowsHookEx
-
C:\Users\Admin\AppData\Local\Temp\wormGPT.exeC:\Users\Admin\AppData\Local\Temp\wormGPT.exe1⤵
- Adds Run key to start application
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1888-21-0x00007FF769240000-0x00007FF7692EA000-memory.dmp
memory/1888-23-0x00007FF769240000-0x00007FF7692EA000-memory.dmp
memory/1888-27-0x00007FF769240000-0x00007FF7692EA000-memory.dmp
memory/1888-3-0x00007FF769240000-0x00007FF7692EA000-memory.dmp
memory/1888-25-0x00007FF769240000-0x00007FF7692EA000-memory.dmp
memory/1888-5-0x00007FF769240000-0x00007FF7692EA000-memory.dmp
memory/1888-13-0x00007FF769240000-0x00007FF7692EA000-memory.dmp
memory/1888-7-0x00007FF769240000-0x00007FF7692EA000-memory.dmp
memory/1888-19-0x00007FF769240000-0x00007FF7692EA000-memory.dmp
memory/1888-9-0x00007FF769240000-0x00007FF7692EA000-memory.dmp
memory/1888-17-0x00007FF769240000-0x00007FF7692EA000-memory.dmp
memory/1888-11-0x00007FF769240000-0x00007FF7692EA000-memory.dmp
memory/1888-1-0x00007FF769240000-0x00007FF7692EA000-memory.dmp
memory/1888-15-0x00007FF769240000-0x00007FF7692EA000-memory.dmp
memory/3336-6-0x00007FF769240000-0x00007FF7692EA000-memory.dmp
memory/3336-26-0x00007FF769240000-0x00007FF7692EA000-memory.dmp
memory/3336-16-0x00007FF769240000-0x00007FF7692EA000-memory.dmp
memory/3336-10-0x00007FF769240000-0x00007FF7692EA000-memory.dmp
memory/3336-18-0x00007FF769240000-0x00007FF7692EA000-memory.dmp
memory/3336-4-0x00007FF769240000-0x00007FF7692EA000-memory.dmp
memory/3336-22-0x00007FF769240000-0x00007FF7692EA000-memory.dmp
memory/3336-0-0x00007FF769240000-0x00007FF7692EA000-memory.dmp
memory/3336-12-0x00007FF769240000-0x00007FF7692EA000-memory.dmp
memory/3336-20-0x00007FF769240000-0x00007FF7692EA000-memory.dmp
memory/3336-24-0x00007FF769240000-0x00007FF7692EA000-memory.dmp
memory/3336-14-0x00007FF769240000-0x00007FF7692EA000-memory.dmp
memory/3336-8-0x00007FF769240000-0x00007FF7692EA000-memory.dmp
memory/3336-2-0x00007FF769240000-0x00007FF7692EA000-memory.dmp