Analysis
- max time kernel
148s - max time network
140s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260706-en - resource tags
- submitted
07/07/2026, 02:09
General
- Target KXOloader.exe
- Size 9KB
- Sample260707-cll5bsfy71
- SHA256 3d9f9903091d82903b8e0c4e6afe5b9e53728eefe737fd891d819fb79718ce7e
Malware Config
Signatures
- Suspicious use of FindShellTrayWindow 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\KXOloader.exe"C:\Users\Admin\AppData\Local\Temp\KXOloader.exe"1⤵
- Suspicious use of FindShellTrayWindow
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1760-0-0x00007FFB192FF000-0x00007FFB19300000-memory.dmp
memory/1760-1-0x0000000000D00000-0x0000000000D08000-memory.dmp
memory/1760-2-0x00007FFB19170000-0x00007FFB19B14000-memory.dmp
memory/1760-3-0x00007FFB19170000-0x00007FFB19B14000-memory.dmp
memory/1760-4-0x00007FFB19170000-0x00007FFB19B14000-memory.dmp
memory/1760-5-0x00007FFB19170000-0x00007FFB19B14000-memory.dmp
memory/1760-6-0x00007FFB19170000-0x00007FFB19B14000-memory.dmp
memory/1760-7-0x00007FFB19170000-0x00007FFB19B14000-memory.dmp
memory/1760-8-0x00007FFB19170000-0x00007FFB19B14000-memory.dmp
memory/1760-9-0x00007FFB19170000-0x00007FFB19B14000-memory.dmp
memory/1760-10-0x00007FFB19170000-0x00007FFB19B14000-memory.dmp
memory/1760-11-0x00007FFB19170000-0x00007FFB19B14000-memory.dmp
memory/1760-12-0x00007FFB19170000-0x00007FFB19B14000-memory.dmp