Analysis
- max time kernel
148s - max time network
121s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260706-en - resource tags
- submitted
07/07/2026, 14:16
General
- Target 62ea893fef2c45f7c0b0bde92558cbce77b3f1474d892d2c8568f81200221081.exe
- Size 2.8MB
- Sample260707-rlms7agx3n
- SHA256 62ea893fef2c45f7c0b0bde92558cbce77b3f1474d892d2c8568f81200221081
Malware Config
Signatures
- Family: SiriusRAT
SiriusRAT is a Windows RAT written in C++ with HVNC, offline keylogging, and remote desktop capabilities.
- Detects SiriusRAT 1 IoCs
- Suspicious use of SetThreadContext 1 IoCs
- Suspicious use of WriteProcessMemory 9 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\62ea893fef2c45f7c0b0bde92558cbce77b3f1474d892d2c8568f81200221081.exe"C:\Users\Admin\AppData\Local\Temp\62ea893fef2c45f7c0b0bde92558cbce77b3f1474d892d2c8568f81200221081.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\62ea893fef2c45f7c0b0bde92558cbce77b3f1474d892d2c8568f81200221081.exeC:\Users\Admin\AppData\Local\Temp\62ea893fef2c45f7c0b0bde92558cbce77b3f1474d892d2c8568f81200221081.exe2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1184-0-0x00007FFED8C0F000-0x00007FFED8C10000-memory.dmp
memory/1184-1-0x000001B69F550000-0x000001B69F828000-memory.dmp
memory/1184-2-0x00007FFED8A80000-0x00007FFED9424000-memory.dmp
memory/1184-3-0x00007FFED8A80000-0x00007FFED9424000-memory.dmp
memory/1184-5-0x00007FFED8A80000-0x00007FFED9424000-memory.dmp
memory/1184-4-0x000001B6BA040000-0x000001B6BA060000-memory.dmp
memory/1184-6-0x00007FFED8A80000-0x00007FFED9424000-memory.dmp
memory/1184-7-0x00007FFED8A80000-0x00007FFED9424000-memory.dmp
memory/1184-8-0x000001B6BDFB0000-0x000001B6BE24A000-memory.dmp
memory/1184-10-0x00007FFED8A80000-0x00007FFED9424000-memory.dmp
memory/1184-11-0x00007FFED8A80000-0x00007FFED9424000-memory.dmp
memory/3524-9-0x0000000140000000-0x0000000140558000-memory.dmp