Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260629-en - resource tags
- submitted
04/07/2026, 11:50
General
- Target reno-bypass.exe
- Size 24.5MB
- Sample260704-nzyk3aex7x
- SHA256 f29535068d68828f8c907ae613e27bcaed7710764ed3544819e64f04128b6dd9
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 16 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\reno-bypass.exe"C:\Users\Admin\AppData\Local\Temp\reno-bypass.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/6056-1-0x00007FF61B2F0000-0x00007FF61EBD7000-memory.dmp
memory/6056-2-0x00007FF61B2F0000-0x00007FF61EBD7000-memory.dmp
memory/6056-3-0x00007FF61B2F0000-0x00007FF61EBD7000-memory.dmp
memory/6056-4-0x00007FF61B2F0000-0x00007FF61EBD7000-memory.dmp
memory/6056-5-0x00007FF61B2F0000-0x00007FF61EBD7000-memory.dmp
memory/6056-6-0x00007FF61B2F0000-0x00007FF61EBD7000-memory.dmp
memory/6056-7-0x00007FF61B2F0000-0x00007FF61EBD7000-memory.dmp
memory/6056-8-0x00007FF61B2F0000-0x00007FF61EBD7000-memory.dmp
memory/6056-9-0x00007FF61B2F0000-0x00007FF61EBD7000-memory.dmp
memory/6056-10-0x00007FF61B2F0000-0x00007FF61EBD7000-memory.dmp
memory/6056-11-0x00007FF61B2F0000-0x00007FF61EBD7000-memory.dmp
memory/6056-12-0x00007FF61B2F0000-0x00007FF61EBD7000-memory.dmp
memory/6056-13-0x00007FF61B2F0000-0x00007FF61EBD7000-memory.dmp
memory/6056-14-0x00007FF61B2F0000-0x00007FF61EBD7000-memory.dmp