Analysis
- max time kernel
149s - max time network
120s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260706-en - resource tags
- submitted
06/07/2026, 23:48
General
- Target KXO loader boot v2(1).exe
- Size 9KB
- Sample260706-3trynadw2t
- SHA256 3d9f9903091d82903b8e0c4e6afe5b9e53728eefe737fd891d819fb79718ce7e
Malware Config
Signatures
- Suspicious use of FindShellTrayWindow 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\KXO loader boot v2(1).exe"C:\Users\Admin\AppData\Local\Temp\KXO loader boot v2(1).exe"1⤵
- Suspicious use of FindShellTrayWindow
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1772-0-0x00007FFEE51BF000-0x00007FFEE51C0000-memory.dmp
memory/1772-1-0x0000000000C10000-0x0000000000C18000-memory.dmp
memory/1772-2-0x00007FFEE5030000-0x00007FFEE59D4000-memory.dmp
memory/1772-3-0x00007FFEE5030000-0x00007FFEE59D4000-memory.dmp
memory/1772-4-0x00007FFEE5030000-0x00007FFEE59D4000-memory.dmp
memory/1772-5-0x00007FFEE5030000-0x00007FFEE59D4000-memory.dmp
memory/1772-6-0x000000001B830000-0x000000001B95F000-memory.dmp
memory/1772-7-0x00007FFEE5030000-0x00007FFEE59D4000-memory.dmp
memory/1772-8-0x00007FFEE5030000-0x00007FFEE59D4000-memory.dmp
memory/1772-9-0x00007FFEE5030000-0x00007FFEE59D4000-memory.dmp
memory/1772-11-0x000000001B830000-0x000000001B95F000-memory.dmp
memory/1772-12-0x00007FFEE5030000-0x00007FFEE59D4000-memory.dmp
memory/1772-13-0x00007FFEE5030000-0x00007FFEE59D4000-memory.dmp