Analysis
- user interaction
yes - max time kernel
148s - max time network
123s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260629-en - resource tags
- submitted
06/07/2026, 04:38
General
- Target GreenLuma 2020 Manager.exe
- Size 17.4MB
- Sample260706-e9jefsdw2r
- SHA256 03a792ce04b5f43d1da10bc07d0998e079363f96dc70eae3b41cc2c81019c13d
Malware Config
Signatures
- Loads dropped DLL 45 IoCs
- UPX packed file 64 IoCs
Detects executables packed with UPX/modified UPX open source packer.
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of AdjustPrivilegeToken 2 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\GreenLuma 2020 Manager.exe"C:\Users\Admin\AppData\Local\Temp\GreenLuma 2020 Manager.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\GreenLuma 2020 Manager.exe"C:\Users\Admin\AppData\Local\Temp\GreenLuma 2020 Manager.exe"2⤵
- Loads dropped DLL
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
MSVCP140.dll
MSVCP140_1.dll
qminimal.dll
qoffscreen.dll
QtCore.pyd
QtGui.pyd
QtWidgets.pyd
sip.cp37-win_amd64.pyd
Qt5Core.dll
Qt5Gui.dll
Qt5Widgets.dll
VCRUNTIME140.dll
VCRUNTIME140_1.dll
_bz2.pyd
_ctypes.pyd
_hashlib.pyd
_lzma.pyd
_queue.pyd
_socket.pyd
_ssl.pyd
base_library.zip
md.cp37-win_amd64.pyd
md__mypyc.cp37-win_amd64.pyd
libcrypto-1_1.dll
libssl-1_1.dll
_psutil_windows.pyd
python3.DLL
python37.dll
select.pyd
ucrtbase.dll
unicodedata.pyd
memory/2932-211-0x00007FF8B1D40000-0x00007FF8B1E4D000-memory.dmp
memory/2932-209-0x00007FF8A4F20000-0x00007FF8A51BA000-memory.dmp
memory/2932-153-0x00007FF8A6E70000-0x00007FF8A7245000-memory.dmp
memory/2932-156-0x00007FF8C1280000-0x00007FF8C12A9000-memory.dmp
memory/2932-164-0x00007FF8C1190000-0x00007FF8C11C2000-memory.dmp
memory/2932-161-0x00007FF8C2D10000-0x00007FF8C2D2A000-memory.dmp
memory/2932-169-0x00007FF8C1260000-0x00007FF8C1272000-memory.dmp
memory/2932-157-0x00007FF8B1D40000-0x00007FF8B1E4D000-memory.dmp
memory/2932-150-0x00007FF8C1220000-0x00007FF8C122B000-memory.dmp
memory/2932-146-0x00007FF8C13E0000-0x00007FF8C13EE000-memory.dmp
memory/2932-188-0x00007FF8A6320000-0x00007FF8A6911000-memory.dmp
memory/2932-189-0x0000025919760000-0x0000025919DA1000-memory.dmp
memory/2932-190-0x00007FF8A5460000-0x00007FF8A5CCA000-memory.dmp
memory/2932-191-0x0000025919760000-0x0000025919FCA000-memory.dmp
memory/2932-192-0x0000025919760000-0x0000025919DA1000-memory.dmp
memory/2932-193-0x00007FF8C1230000-0x00007FF8C1255000-memory.dmp
memory/2932-187-0x00007FF8B91C0000-0x00007FF8B9538000-memory.dmp
memory/2932-144-0x00007FF8B1E50000-0x00007FF8B1F08000-memory.dmp
memory/2932-141-0x00007FF8C1230000-0x00007FF8C1255000-memory.dmp
memory/2932-172-0x00007FF8A6920000-0x00007FF8A6E67000-memory.dmp
memory/2932-137-0x00007FF8B91C0000-0x00007FF8B9538000-memory.dmp
memory/2932-135-0x00007FF8C1260000-0x00007FF8C1272000-memory.dmp
memory/2932-199-0x00007FF8A51C0000-0x00007FF8A5453000-memory.dmp
memory/2932-198-0x00007FF8B9B70000-0x00007FF8B9B97000-memory.dmp
memory/2932-131-0x00007FF8C13F0000-0x00007FF8C13FE000-memory.dmp
memory/2932-202-0x00007FF8C11F0000-0x00007FF8C1216000-memory.dmp
memory/2932-128-0x00007FF8C2D10000-0x00007FF8C2D2A000-memory.dmp
memory/2932-125-0x00007FF8C1280000-0x00007FF8C12A9000-memory.dmp
memory/2932-119-0x00007FF8A6E70000-0x00007FF8A7245000-memory.dmp
memory/2932-210-0x0000025919F90000-0x0000025919FA0000-memory.dmp
memory/2932-213-0x00007FF8AFA40000-0x00007FF8AFAA7000-memory.dmp
memory/2932-212-0x00007FF8BEBA0000-0x00007FF8BEBB8000-memory.dmp
memory/2932-154-0x00007FF8C11F0000-0x00007FF8C1216000-memory.dmp
memory/2932-214-0x00007FF8A6920000-0x00007FF8A6E67000-memory.dmp
memory/2932-163-0x00007FF8C11D0000-0x00007FF8C11EE000-memory.dmp
memory/2932-215-0x00007FF8A5460000-0x00007FF8A5CCA000-memory.dmp
memory/2932-216-0x0000025919760000-0x0000025919DA1000-memory.dmp
memory/2932-217-0x00007FF8A6320000-0x00007FF8A6911000-memory.dmp
memory/2932-218-0x0000025919760000-0x0000025919FCA000-memory.dmp
memory/2932-219-0x00007FF8A6E70000-0x00007FF8A7245000-memory.dmp
memory/2932-237-0x00007FF8B9B70000-0x00007FF8B9B97000-memory.dmp
memory/2932-235-0x00007FF8A5460000-0x00007FF8A5CCA000-memory.dmp
memory/2932-234-0x00007FF8A6320000-0x00007FF8A6911000-memory.dmp
memory/2932-238-0x00007FF8A51C0000-0x00007FF8A5453000-memory.dmp
memory/2932-256-0x0000025919760000-0x0000025919DA1000-memory.dmp
memory/2932-254-0x00007FF8A6320000-0x00007FF8A6911000-memory.dmp
memory/2932-255-0x00007FF8A5460000-0x00007FF8A5CCA000-memory.dmp
memory/2932-274-0x00007FF8A6320000-0x00007FF8A6911000-memory.dmp
memory/2932-276-0x0000025919760000-0x0000025919DA1000-memory.dmp
memory/2932-275-0x00007FF8A5460000-0x00007FF8A5CCA000-memory.dmp
memory/2932-295-0x00007FF8A5460000-0x00007FF8A5CCA000-memory.dmp
memory/2932-296-0x0000025919760000-0x0000025919DA1000-memory.dmp
memory/2932-316-0x0000025919760000-0x0000025919DA1000-memory.dmp
memory/2932-336-0x0000025919760000-0x0000025919DA1000-memory.dmp
memory/2932-335-0x00007FF8A5460000-0x00007FF8A5CCA000-memory.dmp
memory/2932-355-0x00007FF8A5460000-0x00007FF8A5CCA000-memory.dmp
memory/2932-356-0x0000025919760000-0x0000025919DA1000-memory.dmp
memory/2932-376-0x0000025919760000-0x0000025919DA1000-memory.dmp
memory/2932-375-0x00007FF8A5460000-0x00007FF8A5CCA000-memory.dmp
memory/2932-379-0x00007FF8A6E70000-0x00007FF8A7245000-memory.dmp
memory/2932-394-0x00007FF8A6320000-0x00007FF8A6911000-memory.dmp
memory/2932-396-0x0000025919760000-0x0000025919DA1000-memory.dmp
memory/2932-395-0x00007FF8A5460000-0x00007FF8A5CCA000-memory.dmp
memory/2932-397-0x00007FF8B9B70000-0x00007FF8B9B97000-memory.dmp
memory/2932-455-0x00007FF8A5460000-0x00007FF8A5CCA000-memory.dmp