Analysis
- max time kernel
148s - max time network
141s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260629-en - resource tags
- submitted
01/07/2026, 17:10
General
- Target 180e93a091f8ab584a827da92c560c78f468c45f2539f73ab2deb308fb837b38.exe
- Size 691KB
- Sample260701-vpsemaaz5r
- SHA256 180e93a091f8ab584a827da92c560c78f468c45f2539f73ab2deb308fb837b38
Malware Config
Signatures
- Suspicious use of SetThreadContext 1 IoCs
- Suspicious behavior: RenamesItself 1 IoCs
- Suspicious use of WriteProcessMemory 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\180e93a091f8ab584a827da92c560c78f468c45f2539f73ab2deb308fb837b38.exe"C:\Users\Admin\AppData\Local\Temp\180e93a091f8ab584a827da92c560c78f468c45f2539f73ab2deb308fb837b38.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\defrag.exeC:\Windows\system32\defrag.exe2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1512-3-0x000001CC2B9B0000-0x000001CC2B9B1000-memory.dmp
memory/1512-4-0x000001CC2B9C0000-0x000001CC2B9C1000-memory.dmp
memory/1512-1-0x000001CC2B990000-0x000001CC2B991000-memory.dmp
memory/1512-0-0x000001CC2B980000-0x000001CC2B981000-memory.dmp
memory/1512-2-0x000001CC2B9A0000-0x000001CC2B9A1000-memory.dmp
memory/1512-5-0x000001CC2B9D0000-0x000001CC2B9D1000-memory.dmp
memory/1512-9-0x000001CC2BB10000-0x000001CC2BB11000-memory.dmp
memory/1512-7-0x000001CC2BAF0000-0x000001CC2BAF1000-memory.dmp
memory/1512-6-0x000001CC2BAE0000-0x000001CC2BAE1000-memory.dmp
memory/1512-13-0x000001CC2BB60000-0x000001CC2BB61000-memory.dmp
memory/1512-12-0x000001CC2BB40000-0x000001CC2BB41000-memory.dmp
memory/1512-11-0x000001CC2BB30000-0x000001CC2BB31000-memory.dmp
memory/1512-16-0x000001CC2BB90000-0x000001CC2BB91000-memory.dmp
memory/1512-15-0x000001CC2BB80000-0x000001CC2BB81000-memory.dmp
memory/1512-14-0x000001CC2BB70000-0x000001CC2BB71000-memory.dmp
memory/1512-10-0x000001CC2BB20000-0x000001CC2BB21000-memory.dmp
memory/1512-8-0x000001CC2BB00000-0x000001CC2BB01000-memory.dmp
memory/1512-18-0x000001CC2BBB0000-0x000001CC2BBB1000-memory.dmp
memory/1512-20-0x000001CC2BBD0000-0x000001CC2BBD1000-memory.dmp
memory/1512-22-0x000001CC2BBF0000-0x000001CC2BBF1000-memory.dmp
memory/1512-19-0x000001CC2BBC0000-0x000001CC2BBC1000-memory.dmp
memory/1512-21-0x000001CC2BBE0000-0x000001CC2BBE1000-memory.dmp
memory/1512-17-0x000001CC2BBA0000-0x000001CC2BBA1000-memory.dmp
memory/1512-23-0x00007FF678AF0000-0x00007FF6790AC000-memory.dmp