Resubmissions

14/08/2026, 18:11

260814-wsq7eayzcv

14/08/2026, 18:11

260814-wsqkwayzcs

06/08/2026, 04:02

260806-el3s7aff58

06/08/2026, 03:16

260806-dsrh3asdja

28/07/2026, 14:04

260728-rdfpxayajh10

28/07/2026, 13:53

260728-q66alayxav10

28/07/2026, 12:55

260728-p5zkzsxyay10

23/07/2026, 15:06

260723-sg2l8a1frg

26/06/2026, 14:20

260626-rnlznscy7l10

25/06/2026, 14:59

260625-scvywacx3v

Analysis

  • max time kernel
    598s
  • max time network
    443s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    25/06/2026, 14:57

General

  • Target
    capa-testfiles-master/0da87fccbf7687a6c7ab38087dea8b8f32c2b1fb6546101485b7167d18d9c406.exe
  • Size 5.0MB
  • Sample260625-sbpepsc15l
  • SHA256 0da87fccbf7687a6c7ab38087dea8b8f32c2b1fb6546101485b7167d18d9c406
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\capa-testfiles-master\0da87fccbf7687a6c7ab38087dea8b8f32c2b1fb6546101485b7167d18d9c406.exe
    "C:\Users\Admin\AppData\Local\Temp\capa-testfiles-master\0da87fccbf7687a6c7ab38087dea8b8f32c2b1fb6546101485b7167d18d9c406.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:4616

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/4616-0-0x000002AD8F360000-0x000002AD8F52E000-memory.dmp

        memory/4616-30-0x000002AD8F360000-0x000002AD8F52E000-memory.dmp