Analysis

  • max time kernel
    898s
  • max time network
    449s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-it
  • resource tags

    arch:x64arch:x86image:win11-20260513-itlocale:it-itos:windows11-21h2-x64systemwindows
  • submitted
    20/06/2026, 11:08

General

  • Target
    PS22PS4-GUI.exe
  • Size 340KB
  • Sample260620-m8v1vsfx2x
  • SHA256 0d79fa3f02b7bfc5950c6b0a210746fa2d5fd5e51fc7ee7e08851a0fce1a6df1
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SendNotifyMessage 1 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\PS22PS4-GUI.exe
    "C:\Users\Admin\AppData\Local\Temp\PS22PS4-GUI.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:3576
    • C:\Windows\system32\cmd.exe
      C:\Windows\system32\cmd.exe /c s.bat
      2⤵
      • Suspicious use of WriteProcessMemory
      PID:4816
      • C:\Program Files\dotnet\dotnet.exe
        dotnet --list-runtimes
        3⤵
        • System Time Discovery
        PID:4988

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        r.txt

        • Path C:\Users\Admin\AppData\Local\Temp\r.txt
        • Size 552B
        • SHA256 3a540187aba2047118a389c22152a488c215f21766cd75e59c187f7c414bddb1
        • MD5 SHA1 SHA512 TLSH

        s.bat

        • Path C:\Users\Admin\AppData\Local\Temp\s.bat
        • Size 30B
        • SHA256 07ae7cdd12c6ffdb1173fa5413b894e70ada7ed6f27f3e3d6999a29e6e0f8cf0
        • MD5 SHA1 SHA512

        memory/3576-0-0x0000017B37280000-0x0000017B372D8000-memory.dmp

        memory/3576-1-0x0000017B52E30000-0x0000017B52E40000-memory.dmp

        memory/3576-2-0x0000017B52E30000-0x0000017B52E40000-memory.dmp

        memory/3576-3-0x0000017B52E30000-0x0000017B52E40000-memory.dmp

        memory/3576-9-0x0000017B52E30000-0x0000017B52E40000-memory.dmp

        memory/3576-10-0x0000017B52E30000-0x0000017B52E40000-memory.dmp

        memory/3576-11-0x0000017B52E30000-0x0000017B52E40000-memory.dmp