Analysis
- max time kernel
149s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
05/06/2026, 22:22
General
- Target publish/Toolbox/Toolbox.exe
- Size 495KB
- Sample260605-2agsxaev4x
- SHA256 8c9cbde668c9ae6807ffb770198a1620ada5da3de73450396890d23fbc94184d
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\publish\Toolbox\Toolbox.exe"C:\Users\Admin\AppData\Local\Temp\publish\Toolbox\Toolbox.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/616-0-0x00000174479F0000-0x0000017447A70000-memory.dmp
memory/616-1-0x00000174636B0000-0x0000017463D52000-memory.dmp
memory/616-2-0x0000017449780000-0x0000017449790000-memory.dmp
memory/616-3-0x0000017463100000-0x00000174631C1000-memory.dmp
memory/616-4-0x00000174496E0000-0x00000174496E1000-memory.dmp
memory/616-5-0x0000017449780000-0x0000017449790000-memory.dmp
memory/616-6-0x0000017449780000-0x0000017449790000-memory.dmp
memory/616-7-0x00000174667B0000-0x0000017466CFA000-memory.dmp
memory/616-9-0x00000174633C0000-0x00000174633D2000-memory.dmp
memory/616-10-0x0000017463310000-0x000001746331E000-memory.dmp
memory/616-8-0x0000017466350000-0x0000017466432000-memory.dmp
memory/616-11-0x0000017467430000-0x0000017467B5A000-memory.dmp
memory/616-13-0x0000017449870000-0x000001744987C000-memory.dmp
memory/616-12-0x00000174662E0000-0x0000017466310000-memory.dmp
memory/616-22-0x0000017466D00000-0x0000017466D22000-memory.dmp
memory/616-21-0x0000017466EB0000-0x0000017466F04000-memory.dmp
memory/616-20-0x0000017466330000-0x0000017466344000-memory.dmp
memory/616-19-0x0000017466F60000-0x000001746700A000-memory.dmp
memory/616-18-0x0000017466E50000-0x0000017466EA2000-memory.dmp
memory/616-17-0x00000174662B0000-0x00000174662BE000-memory.dmp
memory/616-16-0x0000017466DA0000-0x0000017466DE2000-memory.dmp
memory/616-15-0x0000017466310000-0x0000017466328000-memory.dmp
memory/616-14-0x0000017466D50000-0x0000017466D96000-memory.dmp
memory/616-23-0x0000017466780000-0x000001746679A000-memory.dmp
memory/616-24-0x0000017449780000-0x0000017449790000-memory.dmp
memory/616-25-0x0000017449780000-0x0000017449790000-memory.dmp
memory/616-26-0x0000017449780000-0x0000017449790000-memory.dmp
memory/616-27-0x0000017449780000-0x0000017449790000-memory.dmp
memory/616-28-0x0000017449780000-0x0000017449790000-memory.dmp