Analysis
- max time kernel
37s - max time network
123s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260629-en - resource tags
- submitted
05/07/2026, 18:11
General
- Target nuclei.exe
- Size 131.1MB
- Sample260705-wsv6csav4p
- SHA256 2079d913d3d7b8c5e5c77dd93c4cf2bebac3f3bbd8121564bff495c9354e5110
Malware Config
Signatures
- Modifies system certificate store 2 TTPs 5 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\nuclei.exe"C:\Users\Admin\AppData\Local\Temp\nuclei.exe"1⤵
- Modifies system certificate store
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
easy-table-of-contents.txt
memory/4784-2-0x00000205F48E0000-0x00000205F48E4000-memory.dmp
memory/4784-3-0x00000205F48F0000-0x00000205F48F1000-memory.dmp
memory/4784-1-0x00000205F48D0000-0x00000205F48D1000-memory.dmp
memory/4784-0-0x00000205F48C0000-0x00000205F48C1000-memory.dmp
memory/4784-5-0x00000205F4910000-0x00000205F4911000-memory.dmp
memory/4784-28-0x00000205F4A80000-0x00000205F4A81000-memory.dmp
memory/4784-20-0x00000205F4A00000-0x00000205F4A01000-memory.dmp
memory/4784-27-0x00000205F4A70000-0x00000205F4A71000-memory.dmp
memory/4784-26-0x00000205F4A60000-0x00000205F4A61000-memory.dmp
memory/4784-45-0x00000205F4C30000-0x00000205F4C31000-memory.dmp
memory/4784-51-0x00000205F4CA0000-0x00000205F4CA1000-memory.dmp
memory/4784-50-0x00000205F4C90000-0x00000205F4C91000-memory.dmp
memory/4784-52-0x00000205F4E40000-0x00000205F4E42000-memory.dmp
memory/4784-49-0x00000205F4C80000-0x00000205F4C81000-memory.dmp
memory/4784-48-0x00000205F4C60000-0x00000205F4C71000-memory.dmp
memory/4784-47-0x00000205F4C50000-0x00000205F4C51000-memory.dmp
memory/4784-46-0x00000205F4C40000-0x00000205F4C48000-memory.dmp
memory/4784-44-0x00000205F4C20000-0x00000205F4C21000-memory.dmp
memory/4784-43-0x00000205F4C10000-0x00000205F4C11000-memory.dmp
memory/4784-42-0x00000205F4C00000-0x00000205F4C01000-memory.dmp
memory/4784-41-0x00000205F4BF0000-0x00000205F4BF1000-memory.dmp
memory/4784-40-0x00000205F4BE0000-0x00000205F4BE1000-memory.dmp
memory/4784-39-0x00000205F4BD0000-0x00000205F4BD1000-memory.dmp
memory/4784-38-0x00000205F4BC0000-0x00000205F4BC7000-memory.dmp
memory/4784-37-0x00000205F4BB0000-0x00000205F4BB1000-memory.dmp
memory/4784-36-0x00000205F4BA0000-0x00000205F4BA1000-memory.dmp
memory/4784-35-0x00000205F4B90000-0x00000205F4B91000-memory.dmp
memory/4784-34-0x00000205F4AF0000-0x00000205F4AF1000-memory.dmp
memory/4784-33-0x00000205F4AE0000-0x00000205F4AE1000-memory.dmp
memory/4784-32-0x00000205F4AD0000-0x00000205F4AD5000-memory.dmp
memory/4784-31-0x00000205F4AC0000-0x00000205F4AC1000-memory.dmp
memory/4784-30-0x00000205F4AA0000-0x00000205F4AA1000-memory.dmp
memory/4784-29-0x00000205F4A90000-0x00000205F4A91000-memory.dmp
memory/4784-22-0x00000205F4A20000-0x00000205F4A25000-memory.dmp
memory/4784-25-0x00000205F4A50000-0x00000205F4A51000-memory.dmp
memory/4784-24-0x00000205F4A40000-0x00000205F4A45000-memory.dmp
memory/4784-23-0x00000205F4A30000-0x00000205F4A31000-memory.dmp
memory/4784-21-0x00000205F4A10000-0x00000205F4A11000-memory.dmp
memory/4784-19-0x00000205F49F0000-0x00000205F49F1000-memory.dmp
memory/4784-18-0x00000205F49E0000-0x00000205F49E5000-memory.dmp
memory/4784-17-0x00000205F49D0000-0x00000205F49D1000-memory.dmp
memory/4784-16-0x00000205F49C0000-0x00000205F49C3000-memory.dmp
memory/4784-15-0x00000205F49B0000-0x00000205F49B1000-memory.dmp
memory/4784-14-0x00000205F49A0000-0x00000205F49A1000-memory.dmp
memory/4784-13-0x00000205F4990000-0x00000205F4991000-memory.dmp
memory/4784-12-0x00000205F4980000-0x00000205F4981000-memory.dmp
memory/4784-11-0x00000205F4970000-0x00000205F4971000-memory.dmp
memory/4784-10-0x00000205F4960000-0x00000205F4962000-memory.dmp
memory/4784-8-0x00000205F4940000-0x00000205F4947000-memory.dmp
memory/4784-9-0x00000205F4950000-0x00000205F4951000-memory.dmp
memory/4784-7-0x00000205F4930000-0x00000205F4931000-memory.dmp
memory/4784-6-0x00000205F4920000-0x00000205F4922000-memory.dmp
memory/4784-4-0x00000205F4900000-0x00000205F4904000-memory.dmp
memory/4784-53-0x00000205F66E0000-0x00000205F66E2000-memory.dmp
memory/4784-60-0x00000205F66F0000-0x00000205F66F4000-memory.dmp