Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
20/06/2026, 00:26
General
- Target $_34_.exe
- Size 2.6MB
- Sample260620-arftdsdx51
- SHA256 42400a7e092c84a29ad7f5c29c8f4cbff8e825f0940ba4951fab5f536c703d43
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\$_34_.exe"C:\Users\Admin\AppData\Local\Temp\$_34_.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
console.log
console.log
memory/2004-6-0x000000001DAE0000-0x000000001DBF8000-memory.dmp
memory/2004-3-0x000000001D970000-0x000000001DAD4000-memory.dmp
memory/2004-4-0x000000001D800000-0x000000001D91E000-memory.dmp
memory/2004-5-0x0000000001080000-0x0000000001090000-memory.dmp
memory/2004-0-0x00000000005C0000-0x0000000000852000-memory.dmp
memory/2004-7-0x000000001DDC0000-0x000000001DF74000-memory.dmp
memory/2004-8-0x000000001D140000-0x000000001D19E000-memory.dmp
memory/2004-9-0x000000001D1A0000-0x000000001D1F4000-memory.dmp
memory/2004-10-0x000000001D220000-0x000000001D236000-memory.dmp
memory/2004-2-0x000000001E6F0000-0x000000001F5D4000-memory.dmp
memory/2004-29-0x000000001D200000-0x000000001D216000-memory.dmp
memory/2004-1-0x000000001D2A0000-0x000000001D7F8000-memory.dmp