Analysis
- max time kernel
148s - max time network
125s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260618-en - resource tags
- submitted
22/06/2026, 14:37
General
- Target Application.cmd
- Size 30B
- Sample260622-ry7dcsdt4y
- SHA256 b0f0b6e38f77c518ebfaf691d729636d82cc59dc2a329d7454e11f74a2cb2d3f
Malware Config
Signatures
- Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Application.cmd"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\unit.exeunit.exe package.txt2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5876-11-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-23-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-58-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-63-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-81-0x000001D7F46C0000-0x000001D7F46C1000-memory.dmp
memory/5876-80-0x000001D7F4680000-0x000001D7F46B2000-memory.dmp
memory/5876-79-0x000001D7F2ED0000-0x000001D7F2ED1000-memory.dmp
memory/5876-62-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-61-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-60-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-59-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-57-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-56-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-55-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-54-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-53-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-52-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-51-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-50-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-49-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-48-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-47-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-46-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-45-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-44-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-43-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-42-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-41-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-40-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-39-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-34-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-33-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-32-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-31-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-30-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-29-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-28-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-27-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-22-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-21-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-20-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-19-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-18-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-17-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-16-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-15-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-14-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-13-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-12-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-9-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-6-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-38-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-37-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-36-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-35-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-0-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-25-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-26-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-24-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-10-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-8-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-7-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-5-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-4-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-3-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-2-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-1-0x00007FF7DE5B0000-0x00007FF7DE5C0000-memory.dmp
memory/5876-126-0x000001D7F2ED0000-0x000001D7F2ED1000-memory.dmp
memory/5876-127-0x000001D7F4680000-0x000001D7F46B2000-memory.dmp
memory/5876-128-0x000001D7F46C0000-0x000001D7F46C1000-memory.dmp