Resubmissions

25/07/2026, 18:06

260725-wpt4wsem3w3

12/07/2026, 01:21

260712-bqvftsdz5x3

12/07/2026, 01:20

260712-bqh3ssbx2q3

12/07/2026, 01:16

260712-bm78hsdz3s3

06/07/2026, 23:44

260706-3rc2qaaw2n3

Analysis

  • max time kernel
    149s
  • max time network
    120s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260706-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    06/07/2026, 23:44

General

  • Target
    KXO loader boot v2.exe
  • Size 9KB
  • Sample260706-3rc2qaaw2n
  • SHA256 3d9f9903091d82903b8e0c4e6afe5b9e53728eefe737fd891d819fb79718ce7e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\KXO loader boot v2.exe
    "C:\Users\Admin\AppData\Local\Temp\KXO loader boot v2.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    PID:5328

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/5328-0-0x00007FFC19F5F000-0x00007FFC19F60000-memory.dmp

        memory/5328-1-0x0000000000570000-0x0000000000578000-memory.dmp

        memory/5328-2-0x00007FFC19DD0000-0x00007FFC1A774000-memory.dmp

        memory/5328-3-0x00007FFC19DD0000-0x00007FFC1A774000-memory.dmp

        memory/5328-4-0x00007FFC19DD0000-0x00007FFC1A774000-memory.dmp

        memory/5328-5-0x00007FFC19DD0000-0x00007FFC1A774000-memory.dmp

        memory/5328-6-0x00007FFC19DD0000-0x00007FFC1A774000-memory.dmp

        memory/5328-7-0x00007FFC19DD0000-0x00007FFC1A774000-memory.dmp

        memory/5328-8-0x00007FFC19DD0000-0x00007FFC1A774000-memory.dmp

        memory/5328-9-0x00007FFC19DD0000-0x00007FFC1A774000-memory.dmp