Analysis
- max time kernel
148s - max time network
144s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260617-en - resource tags
- submitted
22/06/2026, 14:37
General
- Target Application.cmd
- Size 31B
- Sample260622-rzbm3sdv2x
- SHA256 4b1c2de95216097702c9e078ec721c99442cdb31128034267e1015cad71d6fcb
Malware Config
Signatures
- Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Application.cmd"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\loader.exeloader.exe module.cso2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3120-7-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-5-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-36-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-40-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-54-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-53-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-52-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-51-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-63-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-62-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-61-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-79-0x0000025659380000-0x0000025659381000-memory.dmp
memory/3120-78-0x0000025659380000-0x0000025659381000-memory.dmp
memory/3120-77-0x0000025659380000-0x0000025659381000-memory.dmp
memory/3120-60-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-59-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-58-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-57-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-56-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-55-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-50-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-49-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-48-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-47-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-46-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-45-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-44-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-43-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-42-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-41-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-39-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-38-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-37-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-34-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-33-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-32-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-27-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-26-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-25-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-24-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-23-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-22-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-21-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-20-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-19-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-18-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-17-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-16-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-35-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-31-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-30-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-29-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-28-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-15-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-14-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-13-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-12-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-11-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-10-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-9-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-8-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-6-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-4-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-3-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-2-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-1-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-0-0x00007FF9754D0000-0x00007FF9754E0000-memory.dmp
memory/3120-88-0x0000025659380000-0x0000025659381000-memory.dmp