Analysis

  • max time kernel
    149s
  • max time network
    153s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    05/06/2026, 22:22

General

  • Target
    publish/Toolbox/Toolbox.exe
  • Size 495KB
  • Sample260605-2agsxaev4x
  • SHA256 8c9cbde668c9ae6807ffb770198a1620ada5da3de73450396890d23fbc94184d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\publish\Toolbox\Toolbox.exe
    "C:\Users\Admin\AppData\Local\Temp\publish\Toolbox\Toolbox.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:772

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/772-0-0x0000023A8EEC0000-0x0000023A8EF40000-memory.dmp

        memory/772-1-0x0000023AAB2E0000-0x0000023AAB982000-memory.dmp

        memory/772-2-0x0000023AAABF0000-0x0000023AAAC00000-memory.dmp

        memory/772-3-0x0000023AAAC30000-0x0000023AAACF1000-memory.dmp

        memory/772-4-0x0000023A8F380000-0x0000023A8F381000-memory.dmp

        memory/772-5-0x0000023AAABF0000-0x0000023AAAC00000-memory.dmp

        memory/772-6-0x0000023AAABF0000-0x0000023AAAC00000-memory.dmp

        memory/772-7-0x0000023AAE190000-0x0000023AAE6DA000-memory.dmp

        memory/772-8-0x0000023AADA80000-0x0000023AADA92000-memory.dmp

        memory/772-10-0x0000023AADF30000-0x0000023AAE012000-memory.dmp

        memory/772-9-0x0000023AAAC00000-0x0000023AAAC0E000-memory.dmp

        memory/772-11-0x0000023AAEE10000-0x0000023AAF53A000-memory.dmp

        memory/772-14-0x0000023AAE730000-0x0000023AAE776000-memory.dmp

        memory/772-17-0x0000023AADAB0000-0x0000023AADABE000-memory.dmp

        memory/772-18-0x0000023AAE830000-0x0000023AAE882000-memory.dmp

        memory/772-22-0x0000023AAE6E0000-0x0000023AAE702000-memory.dmp

        memory/772-21-0x0000023AAE890000-0x0000023AAE8E4000-memory.dmp

        memory/772-20-0x0000023AADF10000-0x0000023AADF24000-memory.dmp

        memory/772-16-0x0000023AAE780000-0x0000023AAE7C2000-memory.dmp

        memory/772-19-0x0000023AAE940000-0x0000023AAE9EA000-memory.dmp

        memory/772-23-0x0000023AAE710000-0x0000023AAE72A000-memory.dmp

        memory/772-15-0x0000023AADEF0000-0x0000023AADF08000-memory.dmp

        memory/772-13-0x0000023AADAA0000-0x0000023AADAAC000-memory.dmp

        memory/772-12-0x0000023AADEC0000-0x0000023AADEF0000-memory.dmp

        memory/772-25-0x0000023AAABF0000-0x0000023AAAC00000-memory.dmp

        memory/772-24-0x0000023AAABF0000-0x0000023AAAC00000-memory.dmp

        memory/772-26-0x0000023AAABF0000-0x0000023AAAC00000-memory.dmp

        memory/772-27-0x0000023AAABF0000-0x0000023AAAC00000-memory.dmp

        memory/772-28-0x0000023AAABF0000-0x0000023AAAC00000-memory.dmp