Analysis
- max time kernel
149s - max time network
156s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260629-en - resource tags
- submitted
04/07/2026, 12:18
General
- Target boxed.exe
- Size 2.2MB
- Sample260704-pgvbcse17v
- SHA256 2385eeed470a174a7237d630bded614f68cf70c3475947cbab84162dcf9700ce
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\boxed.exe"C:\Users\Admin\AppData\Local\Temp\boxed.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
TmpCE49.tmp
memory/3496-19-0x00007FFC18CC0000-0x00007FFC18F23000-memory.dmp
memory/3496-13-0x00007FFC18CC0000-0x00007FFC18F23000-memory.dmp
memory/3496-2-0x00007FFC18CC0000-0x00007FFC18F23000-memory.dmp
memory/3496-5-0x00007FFC18CC0000-0x00007FFC18F23000-memory.dmp
memory/3496-9-0x00000000001F0000-0x00000000001F1000-memory.dmp
memory/3496-8-0x00000000001F0000-0x00000000001F1000-memory.dmp
memory/3496-10-0x00007FFC18CC0000-0x00007FFC18F23000-memory.dmp
memory/3496-20-0x0000000002EF0000-0x0000000002F3C000-memory.dmp
memory/3496-0-0x0000000140000000-0x0000000140207000-memory.dmp
memory/3496-16-0x00000000024C0000-0x0000000002514000-memory.dmp
memory/3496-3-0x00007FFC18CC0000-0x00007FFC18F23000-memory.dmp
memory/3496-15-0x00007FFC18CC0000-0x00007FFC18F23000-memory.dmp
memory/3496-11-0x00007FFC18CC0000-0x00007FFC18F23000-memory.dmp
memory/3496-18-0x00007FFC18CC0000-0x00007FFC18F23000-memory.dmp
memory/3496-17-0x00000000023B0000-0x00000000023C8000-memory.dmp
memory/3496-14-0x00007FFC18CC0000-0x00007FFC18F23000-memory.dmp
memory/3496-1-0x00007FFC18E1F000-0x00007FFC18E20000-memory.dmp
memory/3496-12-0x00007FFC18CC0000-0x00007FFC18F23000-memory.dmp
memory/3496-31-0x00007FFC18CC0000-0x00007FFC18F23000-memory.dmp
memory/3496-32-0x0000000140000000-0x0000000140207000-memory.dmp
memory/3496-33-0x00007FFC18CC0000-0x00007FFC18F23000-memory.dmp
memory/3496-36-0x0000000140000000-0x0000000140207000-memory.dmp
memory/3496-46-0x0000000140000000-0x0000000140207000-memory.dmp