Analysis
- max time kernel
151s - max time network
143s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260630-en - resource tags
- submitted
01/07/2026, 13:25
General
- Target N305KA/N305KA.console.exe
- Size 92.2MB
- Sample260701-qpfcvahs6v
- SHA256 71e2989655174734bc5eccecd69831899055b677848f2d3c38aeca7eff3805c7
Malware Config
Signatures
- Modifies registry class 1 IoCs
- Suspicious use of FindShellTrayWindow 1 IoCs
- Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\N305KA\N305KA.console.exe"C:\Users\Admin\AppData\Local\Temp\N305KA\N305KA.console.exe"1⤵
- Modifies registry class
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
c140eb3296a16c89668476f1ae511f0623e00914.d3d12.cache
memory/4832-91-0x00007FF791E20000-0x00007FF797BB5000-memory.dmp
memory/4832-93-0x00007FF791E20000-0x00007FF797BB5000-memory.dmp
memory/4832-4-0x0000017A5A410000-0x0000017A5A411000-memory.dmp
memory/4832-1-0x00007FFF56A80000-0x00007FFF56DD8000-memory.dmp
memory/4832-72-0x00007FFF56A80000-0x00007FFF56DD8000-memory.dmp
memory/4832-71-0x00007FF791E20000-0x00007FF797BB5000-memory.dmp
memory/4832-0-0x00007FF791E20000-0x00007FF797BB5000-memory.dmp
memory/4832-90-0x00007FFF56A80000-0x00007FFF56DD8000-memory.dmp
memory/4832-2-0x0000017A5A410000-0x0000017A5A411000-memory.dmp
memory/4832-89-0x00007FF791E20000-0x00007FF797BB5000-memory.dmp
memory/4832-46-0x00007FF791E20000-0x00007FF797BB5000-memory.dmp
memory/4832-95-0x00007FF791E20000-0x00007FF797BB5000-memory.dmp
memory/4832-97-0x00007FF791E20000-0x00007FF797BB5000-memory.dmp
memory/4832-99-0x00007FF791E20000-0x00007FF797BB5000-memory.dmp
memory/4832-101-0x00007FF791E20000-0x00007FF797BB5000-memory.dmp
memory/4832-103-0x00007FF791E20000-0x00007FF797BB5000-memory.dmp
memory/4832-105-0x00007FF791E20000-0x00007FF797BB5000-memory.dmp
memory/4832-107-0x00007FF791E20000-0x00007FF797BB5000-memory.dmp
memory/4832-109-0x00007FF791E20000-0x00007FF797BB5000-memory.dmp