Analysis
- max time kernel
150s - max time network
125s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260617-en - resource tags
- submitted
23/06/2026, 00:19
General
- Target Nostroller Options V2.0/Nostroller Options V2.0.exe
- Size 13.6MB
- Sample260623-ammfdahs6q
- SHA256 3fa2764c014a709e27292a0507bd59dad69fd34d008e791be5694f427a62004b
Malware Config
Signatures
- Loads dropped DLL 11 IoCs
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Nostroller Options V2.0\Nostroller Options V2.0.exe"C:\Users\Admin\AppData\Local\Temp\Nostroller Options V2.0\Nostroller Options V2.0.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
evb2FE1.tmp
evb309D.tmp
evb31A8.tmp
evb3468.tmp
evb3488.tmp
evb34E7.tmp
evb4236.tmp
evb4277.tmp
evb42C7.tmp
memory/5548-86-0x00000000053F0000-0x000000000544A000-memory.dmp
memory/5548-89-0x0000000004F40000-0x0000000004FB2000-memory.dmp
memory/5548-22-0x0000000180000000-0x00000001805BF000-memory.dmp
memory/5548-25-0x0000000003110000-0x0000000003678000-memory.dmp
memory/5548-29-0x0000000003110000-0x0000000003678000-memory.dmp
memory/5548-33-0x0000000003110000-0x0000000003678000-memory.dmp
memory/5548-24-0x00000000029C0000-0x0000000003104000-memory.dmp
memory/5548-39-0x0000000002380000-0x0000000002444000-memory.dmp
memory/5548-37-0x0000000000600000-0x000000000060D000-memory.dmp
memory/5548-42-0x00007FFF3C500000-0x00007FFF3C763000-memory.dmp
memory/5548-50-0x00000000043D0000-0x00000000043F6000-memory.dmp
memory/5548-52-0x0000000002380000-0x0000000002448000-memory.dmp
memory/5548-58-0x00000000043D0000-0x00000000043F7000-memory.dmp
memory/5548-56-0x00000000043D0000-0x00000000043F7000-memory.dmp
memory/5548-54-0x00000000043D0000-0x00000000043F7000-memory.dmp
memory/5548-12-0x00000000029C0000-0x0000000003104000-memory.dmp
memory/5548-48-0x0000000002380000-0x0000000002448000-memory.dmp
memory/5548-45-0x0000000002380000-0x0000000002448000-memory.dmp
memory/5548-16-0x00000000029C0000-0x0000000003104000-memory.dmp
memory/5548-41-0x0000000000600000-0x000000000060D000-memory.dmp
memory/5548-38-0x0000000000600000-0x000000000060D000-memory.dmp
memory/5548-10-0x00007FFF3C500000-0x00007FFF3C763000-memory.dmp
memory/5548-34-0x0000000180000000-0x00000001805BF000-memory.dmp
memory/5548-59-0x0000000004F00000-0x0000000004F11000-memory.dmp
memory/5548-61-0x0000000004F00000-0x0000000004F0C000-memory.dmp
memory/5548-62-0x0000000004F00000-0x0000000004F70000-memory.dmp
memory/5548-63-0x0000000004F00000-0x0000000004F0A000-memory.dmp
memory/5548-67-0x0000000004F00000-0x0000000004F0E000-memory.dmp
memory/5548-5-0x0000000180000000-0x00000001805BF000-memory.dmp
memory/5548-69-0x0000000004F00000-0x0000000004F0E000-memory.dmp
memory/5548-66-0x0000000004F00000-0x0000000004F0E000-memory.dmp
memory/5548-60-0x0000000004F00000-0x0000000004F0C000-memory.dmp
memory/5548-72-0x0000000140000000-0x00000001401C7000-memory.dmp
memory/5548-79-0x0000000004F20000-0x0000000004F2E000-memory.dmp
memory/5548-77-0x0000000004F40000-0x0000000004FB2000-memory.dmp
memory/5548-75-0x0000000004F40000-0x0000000004FB2000-memory.dmp
memory/5548-84-0x00000000053F0000-0x000000000544A000-memory.dmp
memory/5548-0-0x0000000140000000-0x00000001401C7000-memory.dmp
memory/5548-88-0x00007FFF3C500000-0x00007FFF3C763000-memory.dmp
memory/5548-3-0x00007FFF3C500000-0x00007FFF3C763000-memory.dmp
memory/5548-20-0x00007FFF3C500000-0x00007FFF3C763000-memory.dmp
memory/5548-2-0x00007FFF3C65F000-0x00007FFF3C660000-memory.dmp
memory/5548-161-0x0000000003110000-0x0000000003678000-memory.dmp
memory/5548-93-0x0000000180000000-0x00000001805BF000-memory.dmp
memory/5548-92-0x0000000004FD0000-0x0000000004FDD000-memory.dmp
memory/5548-91-0x00000000053F0000-0x000000000544A000-memory.dmp
memory/5548-90-0x00000000029C0000-0x0000000003104000-memory.dmp
memory/5548-94-0x0000000003110000-0x0000000003678000-memory.dmp
memory/5548-95-0x00007FFF3C500000-0x00007FFF3C763000-memory.dmp
memory/5548-96-0x0000000002380000-0x0000000002448000-memory.dmp
memory/5548-97-0x0000000140000000-0x00000001401C7000-memory.dmp
memory/5548-98-0x0000000180000000-0x00000001805BF000-memory.dmp
memory/5548-109-0x00000000043D0000-0x00000000043F7000-memory.dmp
memory/5548-99-0x00000000029C0000-0x0000000003104000-memory.dmp
memory/5548-111-0x0000000180000000-0x00000001805BF000-memory.dmp
memory/5548-112-0x00000000029C0000-0x0000000003104000-memory.dmp
memory/5548-115-0x0000000002380000-0x0000000002448000-memory.dmp
memory/5548-113-0x0000000003110000-0x0000000003678000-memory.dmp
memory/5548-124-0x00000000029C0000-0x0000000003104000-memory.dmp
memory/5548-125-0x0000000003110000-0x0000000003678000-memory.dmp
memory/5548-127-0x0000000002380000-0x0000000002448000-memory.dmp
memory/5548-123-0x0000000180000000-0x00000001805BF000-memory.dmp
memory/5548-136-0x00000000029C0000-0x0000000003104000-memory.dmp
memory/5548-137-0x0000000003110000-0x0000000003678000-memory.dmp
memory/5548-149-0x0000000003110000-0x0000000003678000-memory.dmp
memory/5548-159-0x0000000180000000-0x00000001805BF000-memory.dmp
memory/5548-160-0x00000000029C0000-0x0000000003104000-memory.dmp
memory/5548-73-0x00007FFF3C500000-0x00007FFF3C763000-memory.dmp
memory/5548-163-0x0000000002380000-0x0000000002448000-memory.dmp
memory/5548-173-0x0000000003110000-0x0000000003678000-memory.dmp
memory/5548-185-0x0000000003110000-0x0000000003678000-memory.dmp
memory/5548-196-0x00000000029C0000-0x0000000003104000-memory.dmp
memory/5548-199-0x0000000002380000-0x0000000002448000-memory.dmp
memory/5548-197-0x0000000003110000-0x0000000003678000-memory.dmp
memory/5548-209-0x0000000003110000-0x0000000003678000-memory.dmp
memory/5548-221-0x0000000003110000-0x0000000003678000-memory.dmp
memory/5548-235-0x0000000002380000-0x0000000002448000-memory.dmp
memory/5548-232-0x00000000029C0000-0x0000000003104000-memory.dmp
memory/5548-233-0x0000000003110000-0x0000000003678000-memory.dmp
memory/5548-242-0x0000000140000000-0x00000001401C7000-memory.dmp
memory/5548-245-0x0000000003110000-0x0000000003678000-memory.dmp
memory/5548-254-0x0000000140000000-0x00000001401C7000-memory.dmp
memory/5548-257-0x0000000003110000-0x0000000003678000-memory.dmp