Analysis
- max time kernel
149s - max time network
153s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260617-en - resource tags
- submitted
29/06/2026, 03:03
General
- Target SkySpoofer V3.exe
- Size 4.1MB
- Sample260629-dkjs9acz5l
- SHA256 c59b4782555c6e9c6506991ae91d3b588ec625269f1e4855da8808ad14c8ac3a
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 16 IoCs
- Suspicious behavior: EnumeratesProcesses 2 IoCs
- Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\SkySpoofer V3.exe"C:\Users\Admin\AppData\Local\Temp\SkySpoofer V3.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x00000000000004D0 0x00000000000004CC1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2712-0-0x0000000000E20000-0x0000000001DE2000-memory.dmp
memory/2712-1-0x00007FF4B2E80000-0x00007FF4B3251000-memory.dmp
memory/2712-2-0x00007FFBC8DFF000-0x00007FFBC8E00000-memory.dmp
memory/2712-3-0x00007FFBC8CA0000-0x00007FFBC8F03000-memory.dmp
memory/2712-8-0x00007FFBC8CA0000-0x00007FFBC8F03000-memory.dmp
memory/2712-6-0x0000000000E20000-0x0000000001DE2000-memory.dmp
memory/2712-9-0x00007FFBC8CA0000-0x00007FFBC8F03000-memory.dmp
memory/2712-5-0x0000000000E20000-0x0000000001DE2000-memory.dmp
memory/2712-10-0x00007FFBC8CA0000-0x00007FFBC8F03000-memory.dmp
memory/2712-12-0x00007FFBC8CA0000-0x00007FFBC8F03000-memory.dmp
memory/2712-13-0x0000000000E20000-0x0000000001DE2000-memory.dmp
memory/2712-14-0x00007FFBC8CA0000-0x00007FFBC8F03000-memory.dmp
memory/2712-11-0x0000000000E20000-0x0000000001DE2000-memory.dmp
memory/2712-7-0x00007FFBC8CA0000-0x00007FFBC8F03000-memory.dmp
memory/2712-4-0x00007FFBC8CA0000-0x00007FFBC8F03000-memory.dmp
memory/2712-16-0x00007FFBC8CA0000-0x00007FFBC8F03000-memory.dmp
memory/2712-15-0x00007FFBC8CA0000-0x00007FFBC8F03000-memory.dmp
memory/2712-18-0x0000000000E20000-0x0000000001DE2000-memory.dmp
memory/2712-19-0x00007FF4B2E80000-0x00007FF4B3251000-memory.dmp
memory/2712-20-0x00007FFBC8CA0000-0x00007FFBC8F03000-memory.dmp
memory/2712-21-0x00007FFBC8CA0000-0x00007FFBC8F03000-memory.dmp
memory/2712-22-0x00007FFBC8CA0000-0x00007FFBC8F03000-memory.dmp
memory/2712-23-0x00007FFBC8CA0000-0x00007FFBC8F03000-memory.dmp
memory/2712-26-0x00007FFBC8CA0000-0x00007FFBC8F03000-memory.dmp
memory/2712-28-0x00007FFBC8CA0000-0x00007FFBC8F03000-memory.dmp
memory/2712-30-0x00007FFBC8CA0000-0x00007FFBC8F03000-memory.dmp
memory/2712-29-0x00007FFBC8CA0000-0x00007FFBC8F03000-memory.dmp
memory/2712-27-0x00007FFBC8CA0000-0x00007FFBC8F03000-memory.dmp
memory/2712-25-0x00007FFBC8CA0000-0x00007FFBC8F03000-memory.dmp
memory/2712-24-0x00007FFBC8CA0000-0x00007FFBC8F03000-memory.dmp
memory/2712-31-0x00007FFBC8CA0000-0x00007FFBC8F03000-memory.dmp
memory/2712-32-0x00007FFBC8CA0000-0x00007FFBC8F03000-memory.dmp
memory/2712-33-0x00007FFBC8CA0000-0x00007FFBC8F03000-memory.dmp
memory/2712-34-0x00007FFBC8CA0000-0x00007FFBC8F03000-memory.dmp
memory/2712-36-0x00007FFBC8CA0000-0x00007FFBC8F03000-memory.dmp
memory/2712-35-0x00007FFBC8CA0000-0x00007FFBC8F03000-memory.dmp
memory/2712-37-0x0000000000E20000-0x0000000001DE2000-memory.dmp
memory/2712-38-0x0000000000E20000-0x0000000001DE2000-memory.dmp
memory/2712-39-0x0000000000E20000-0x0000000001DE2000-memory.dmp
memory/2712-40-0x0000000000E20000-0x0000000001DE2000-memory.dmp
memory/2712-41-0x0000000000E20000-0x0000000001DE2000-memory.dmp
memory/2712-42-0x0000000000E20000-0x0000000001DE2000-memory.dmp
memory/2712-43-0x0000000000E20000-0x0000000001DE2000-memory.dmp
memory/2712-44-0x0000000000E20000-0x0000000001DE2000-memory.dmp
memory/2712-45-0x0000000000E20000-0x0000000001DE2000-memory.dmp
memory/2712-46-0x0000000000E20000-0x0000000001DE2000-memory.dmp
memory/2712-47-0x0000000000E20000-0x0000000001DE2000-memory.dmp
memory/2712-48-0x0000000000E20000-0x0000000001DE2000-memory.dmp
memory/2712-49-0x0000000000E20000-0x0000000001DE2000-memory.dmp