Analysis
- user interaction
yes - max time kernel
108s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260618-en - resource tags
- submitted
23/06/2026, 14:06
General
- Target Cerby cursor-pendant v1.1.exe
- Size 5.1MB
- Sample260623-refrasdv61
- SHA256 b6364c3bba5eb3cd1d66a9cf4fab757bbde4ee27186949719ec9352e4f38e0a6
Malware Config
Signatures
- Suspicious use of FindShellTrayWindow 3 IoCs
- Suspicious use of SendNotifyMessage 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Cerby cursor-pendant v1.1.exe"C:\Users\Admin\AppData\Local\Temp\Cerby cursor-pendant v1.1.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4660-0-0x00007FFE78E3F000-0x00007FFE78E40000-memory.dmp
memory/4660-1-0x000001ED3E5C0000-0x000001ED3EAD6000-memory.dmp
memory/4660-2-0x00007FFE78CB0000-0x00007FFE79654000-memory.dmp
memory/4660-3-0x00007FFE78CB0000-0x00007FFE79654000-memory.dmp
memory/4660-4-0x00007FFE78CB0000-0x00007FFE79654000-memory.dmp
memory/4660-5-0x00007FFE78CB0000-0x00007FFE79654000-memory.dmp
memory/4660-6-0x00007FFE78CB0000-0x00007FFE79654000-memory.dmp
memory/4660-7-0x00007FFE78CB0000-0x00007FFE79654000-memory.dmp
memory/4660-8-0x00007FFE78CB0000-0x00007FFE79654000-memory.dmp
memory/4660-9-0x00007FFE78CB0000-0x00007FFE79654000-memory.dmp
memory/4660-10-0x00007FFE78CB0000-0x00007FFE79654000-memory.dmp
memory/4660-11-0x00007FFE78CB0000-0x00007FFE79654000-memory.dmp
memory/4660-12-0x00007FFE78CB0000-0x00007FFE79654000-memory.dmp
memory/4660-13-0x00007FFE78CB0000-0x00007FFE79654000-memory.dmp
memory/4660-14-0x00007FFE78CB0000-0x00007FFE79654000-memory.dmp