Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260618-en - resource tags
- submitted
21/06/2026, 19:08
General
- Target host Run as admin.exe
- Size 2.1MB
- Sample260621-xtbc1sfx5w
- SHA256 4042c9bd838ad6d06b07dbb08fd2acc3cf478bdcfd7dbc069d221a8478ea17af
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
- Suspicious behavior: LoadsDriver 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\host Run as admin.exe"C:\Users\Admin\AppData\Local\Temp\host Run as admin.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2392-2-0x00007FF704B40000-0x00007FF704EFC000-memory.dmp
memory/2392-1-0x00007FF9193D0000-0x00007FF9193D2000-memory.dmp
memory/2392-0-0x00007FF704B51000-0x00007FF704CE7000-memory.dmp
memory/2392-3-0x00007FF9193E0000-0x00007FF9193E2000-memory.dmp
memory/2392-7-0x00007FF916EF0000-0x00007FF916EF2000-memory.dmp
memory/2392-6-0x00007FF917DD0000-0x00007FF917DD2000-memory.dmp
memory/2392-5-0x00007FF917DC0000-0x00007FF917DC2000-memory.dmp
memory/2392-4-0x00007FF9193F0000-0x00007FF9193F2000-memory.dmp
memory/2392-8-0x00007FF916F00000-0x00007FF916F02000-memory.dmp
memory/2392-9-0x00007FF704B40000-0x00007FF704EFC000-memory.dmp
memory/2392-14-0x00007FF704B51000-0x00007FF704CE7000-memory.dmp
memory/2392-13-0x00007FF704B40000-0x00007FF704EFC000-memory.dmp
memory/2392-12-0x00007FF704B40000-0x00007FF704EFC000-memory.dmp