Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260629-en - resource tags
- submitted
05/07/2026, 22:27
General
- Target d9a6b0980584c4f9ca9b7c8a125759e3f022c18ac667cc93f38b588aabd1158b.exe
- Size 293KB
- Sample260705-2c4epaby5r
- SHA256 4bedcb642eb2286b76fdf226d844469daabb04dc6990e3e02f8f6cd4d613541a
Score
3/10
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d9a6b0980584c4f9ca9b7c8a125759e3f022c18ac667cc93f38b588aabd1158b.exe"C:\Users\Admin\AppData\Local\Temp\d9a6b0980584c4f9ca9b7c8a125759e3f022c18ac667cc93f38b588aabd1158b.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\d9a6b0980584c4f9ca9b7c8a125759e3f022c18ac667cc93f38b588aabd1158b.exe"C:\Users\Admin\AppData\Local\Temp\d9a6b0980584c4f9ca9b7c8a125759e3f022c18ac667cc93f38b588aabd1158b.exe"2⤵
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/920-4-0x00007FFCD1640000-0x00007FFCD1FE4000-memory.dmp
memory/920-5-0x00007FFCD1640000-0x00007FFCD1FE4000-memory.dmp
memory/920-6-0x00007FFCD1640000-0x00007FFCD1FE4000-memory.dmp
memory/4232-0-0x00007FFCD17CF000-0x00007FFCD17D0000-memory.dmp
memory/4232-1-0x0000000000DA0000-0x0000000000DF0000-memory.dmp
memory/4232-2-0x00007FFCD1640000-0x00007FFCD1FE4000-memory.dmp
memory/4232-3-0x00007FFCD1640000-0x00007FFCD1FE4000-memory.dmp
memory/4232-7-0x00007FFCD1640000-0x00007FFCD1FE4000-memory.dmp
memory/4232-8-0x00007FFCD1640000-0x00007FFCD1FE4000-memory.dmp