Analysis
- max time kernel
149s - max time network
151s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
- submitted
02/06/2026, 12:13
General
- Target Application.cmd
- Size 114B
- Sample260602-pdvsqady6k
- SHA256 19908117b6fb4b4ebc9889ffe94a7d66b1c25fb72504e190519dcca6e2dec8cf
Malware Config
Signatures
- Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Application.cmd"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\luajit.exeluajit.exe jit.txt2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2108-2-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-17-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-59-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-63-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-82-0x00000000006E0000-0x00000000006E1000-memory.dmp
memory/2108-81-0x00000000006E0000-0x00000000006E1000-memory.dmp
memory/2108-80-0x00000000006E0000-0x00000000006E1000-memory.dmp
memory/2108-79-0x00000000006E0000-0x00000000006E1000-memory.dmp
memory/2108-78-0x00000000006E0000-0x00000000006E1000-memory.dmp
memory/2108-62-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-61-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-58-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-57-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-55-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-53-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-52-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-51-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-50-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-49-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-48-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-47-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-46-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-45-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-44-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-43-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-42-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-41-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-38-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-35-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-34-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-33-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-32-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-31-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-30-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-29-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-28-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-27-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-26-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-24-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-23-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-22-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-21-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-20-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-19-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-15-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-14-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-13-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-12-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-11-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-10-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-9-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-8-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-7-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-6-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-5-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-3-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-60-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-56-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-54-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-40-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-39-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-37-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-36-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-25-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-18-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-16-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-4-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-1-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-0-0x000000008CB10000-0x000000008CB20000-memory.dmp
memory/2108-84-0x00000000006E0000-0x00000000006E1000-memory.dmp