Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260618-en - resource tags
- submitted
28/06/2026, 02:56
General
- Target FH6AllInOneTrainer.exe
- Size 49.4MB
- Sample260628-dfcjdaez6j
- SHA256 1b587176268668a5e4754ef03370c3abea8157bc0431ba96788b3b2b8c86eb46
Malware Config
Signatures
- Loads dropped DLL 3 IoCs
- Suspicious behavior: EnumeratesProcesses 64 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of FindShellTrayWindow 4 IoCs
- Suspicious use of SendNotifyMessage 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\FH6AllInOneTrainer.exe"C:\Users\Admin\AppData\Local\Temp\FH6AllInOneTrainer.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
av_libglesv2.dll
libHarfBuzzSharp.dll
libSkiaSharp.dll
memory/3200-23-0x0000018615120000-0x0000018615140000-memory.dmp
memory/3200-11-0x0000018614980000-0x00000186149B0000-memory.dmp
memory/3200-3-0x00000186160D0000-0x0000018617020000-memory.dmp
memory/3200-27-0x0000018617170000-0x0000018617190000-memory.dmp
memory/3200-35-0x00000186171B0000-0x00000186171E0000-memory.dmp
memory/3200-41-0x0000018617AC0000-0x0000018617B70000-memory.dmp
memory/3200-31-0x0000018617940000-0x0000018617980000-memory.dmp
memory/3200-7-0x0000018613120000-0x0000018613140000-memory.dmp
memory/3200-45-0x0000018612EA0000-0x0000018612EB0000-memory.dmp
memory/3200-19-0x00000186149F0000-0x0000018614A10000-memory.dmp
memory/3200-51-0x0000018E1DAE0000-0x0000018E1DBA0000-memory.dmp
memory/3200-55-0x0000018E1FD90000-0x0000018E1FF60000-memory.dmp
memory/3200-59-0x0000018E20060000-0x0000018E200E0000-memory.dmp
memory/3200-63-0x0000018E20DA0000-0x0000018E20DF0000-memory.dmp
memory/3200-71-0x0000018E1FBA0000-0x0000018E1FBC0000-memory.dmp
memory/3200-67-0x0000018E20DF0000-0x0000018E20E20000-memory.dmp
memory/3200-15-0x0000018615080000-0x00000186150D0000-memory.dmp