Analysis
- max time kernel
149s - max time network
149s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
- submitted
03/06/2026, 07:32
General
- Target flagbrowser.exe
- Size 68.4MB
- Sample260603-jdbrysb16j
- SHA256 4699075616417b55c149b89e1d2bd1499fcd2265545074f0c26ab75551990b0c
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\flagbrowser.exe"C:\Users\Admin\AppData\Local\Temp\flagbrowser.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4800-5-0x0000023133FE0000-0x0000023134C70000-memory.dmp
memory/4800-9-0x0000023132CA0000-0x0000023132CE0000-memory.dmp
memory/4800-14-0x0000023135E00000-0x0000023136AF0000-memory.dmp
memory/4800-21-0x0000023136AF0000-0x0000023136DD0000-memory.dmp
memory/4800-37-0x0000023134F50000-0x0000023134F80000-memory.dmp
memory/4800-45-0x0000023134FA0000-0x0000023134FC0000-memory.dmp
memory/4800-71-0x0000023136E90000-0x0000023136EE0000-memory.dmp
memory/4800-76-0x00000271CC730000-0x00000271CC740000-memory.dmp
memory/4800-67-0x00000231350D0000-0x0000023135110000-memory.dmp
memory/4800-63-0x0000023135060000-0x0000023135080000-memory.dmp
memory/4800-59-0x0000023135030000-0x0000023135060000-memory.dmp
memory/4800-55-0x00000271CC190000-0x00000271CC300000-memory.dmp
memory/4800-51-0x00000271CBEA0000-0x00000271CC020000-memory.dmp
memory/4800-41-0x00000231331D0000-0x00000231331F0000-memory.dmp
memory/4800-33-0x00000231332B0000-0x0000023133340000-memory.dmp
memory/4800-29-0x0000023132D90000-0x0000023132DB0000-memory.dmp
memory/4800-25-0x0000023132D00000-0x0000023132D20000-memory.dmp
memory/4800-17-0x0000023132CE0000-0x0000023132D00000-memory.dmp
memory/4800-80-0x00000271CC7C0000-0x00000271CC7E0000-memory.dmp
memory/4800-84-0x0000023136E30000-0x0000023136E40000-memory.dmp
memory/4800-88-0x00000271D0970000-0x00000271D0A30000-memory.dmp
memory/4800-93-0x00000271D0BB0000-0x00000271D0CB0000-memory.dmp
memory/4800-100-0x00000271D0A80000-0x00000271D0AB0000-memory.dmp
memory/4800-96-0x00000271D0860000-0x00000271D0880000-memory.dmp
memory/4800-104-0x00000271D11B0000-0x00000271D11D0000-memory.dmp
memory/4800-108-0x00000271D1450000-0x00000271D1600000-memory.dmp
memory/4800-120-0x00000271D1830000-0x00000271D18E0000-memory.dmp
memory/4800-116-0x00000271D16B0000-0x00000271D1720000-memory.dmp
memory/4800-112-0x00000271D1260000-0x00000271D12A0000-memory.dmp
memory/4800-124-0x00000271D1BD0000-0x00000271D1DD0000-memory.dmp
memory/4800-128-0x00000271D1DD0000-0x00000271D1E60000-memory.dmp
memory/4800-132-0x00000271D11F0000-0x00000271D1210000-memory.dmp
memory/4800-136-0x00000271D29A0000-0x00000271D29D0000-memory.dmp
memory/4800-140-0x00000271D2BC0000-0x00000271D2C10000-memory.dmp
memory/4800-152-0x00000271D2F90000-0x00000271D3060000-memory.dmp
memory/4800-148-0x00000271D2DB0000-0x00000271D2EC0000-memory.dmp
memory/4800-144-0x0000023132BD0000-0x0000023132BE0000-memory.dmp