Analysis
- max time kernel
148s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
07/07/2026, 17:16
General
- Target Content Manager.exe
- Size 10.8MB
- Sample260707-vs9hbaav2v
- SHA256 2367612db7c754bf4f07a0f71188c0cc7ed0e39bef12b7dc3f4af3d0b3ec5bd4
Malware Config
Signatures
- Loads dropped DLL 6 IoCs
- ConfuserEx .NET packer 2 IoCs
Detects ConfuserEx .NET packer.
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Modifies Internet Explorer settings 1 TTPs 3 IoCs
- Modifies registry class 33 IoCs
- Suspicious behavior: EnumeratesProcesses 1 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of FindShellTrayWindow 4 IoCs
- Suspicious use of SendNotifyMessage 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Content Manager.exe"C:\Users\Admin\AppData\Local\Temp\Content Manager.exe"1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
common.ttf
Fuzo.png
macedosti.png
remjzx.png
interop.d3dimageex.dll
nvidia.texturetools.compress.dll
slimdx.dll
memory/2676-42-0x0000000007B40000-0x0000000007C7E000-memory.dmp
memory/2676-61-0x0000000008190000-0x00000000081A2000-memory.dmp
memory/2676-34-0x0000000007650000-0x00000000078F2000-memory.dmp
memory/2676-35-0x0000000007910000-0x0000000007A50000-memory.dmp
memory/2676-36-0x0000000007A70000-0x0000000007AFC000-memory.dmp
memory/2676-37-0x0000000007B10000-0x0000000007B3E000-memory.dmp
memory/2676-45-0x0000000003D50000-0x0000000003D84000-memory.dmp
memory/2676-44-0x0000000003D40000-0x0000000003D48000-memory.dmp
memory/2676-46-0x0000000003D90000-0x0000000003D96000-memory.dmp
memory/2676-43-0x0000000003D30000-0x0000000003D3E000-memory.dmp
memory/2676-47-0x0000000007C90000-0x0000000007D0E000-memory.dmp
memory/2676-48-0x0000000007D20000-0x0000000007EF6000-memory.dmp
memory/2676-56-0x0000000008350000-0x0000000008558000-memory.dmp
memory/2676-52-0x0000000007F50000-0x0000000007F60000-memory.dmp
memory/2676-51-0x0000000007F40000-0x0000000007F4A000-memory.dmp
memory/2676-50-0x0000000007F20000-0x0000000007F2A000-memory.dmp
memory/2676-49-0x0000000007FA0000-0x0000000008032000-memory.dmp
memory/2676-2-0x0000000006F70000-0x000000000749C000-memory.dmp
memory/2676-60-0x0000000008170000-0x000000000817C000-memory.dmp
memory/2676-63-0x00000000081C0000-0x00000000081CE000-memory.dmp
memory/2676-62-0x00000000081A0000-0x00000000081B4000-memory.dmp
memory/2676-3-0x00000000063E0000-0x00000000063F0000-memory.dmp
memory/2676-68-0x00000000063E0000-0x00000000063F0000-memory.dmp
memory/2676-76-0x0000000008780000-0x0000000008788000-memory.dmp
memory/2676-88-0x0000000008AC0000-0x0000000008ACE000-memory.dmp
memory/2676-102-0x0000000008DE0000-0x0000000008DFA000-memory.dmp
memory/2676-107-0x0000000008FB0000-0x000000000902C000-memory.dmp
memory/2676-106-0x0000000008F80000-0x0000000008FAA000-memory.dmp
memory/2676-120-0x00000000063E0000-0x00000000063F0000-memory.dmp
memory/2676-140-0x000000000AA70000-0x000000000AA92000-memory.dmp
memory/2676-139-0x0000000009BF0000-0x0000000009BFE000-memory.dmp
memory/2676-138-0x000000000AA30000-0x000000000AA68000-memory.dmp
memory/2676-141-0x000000000AAA0000-0x000000000ADF4000-memory.dmp
memory/2676-143-0x000000000AE60000-0x000000000AE68000-memory.dmp
memory/2676-142-0x000000000AE40000-0x000000000AE48000-memory.dmp
memory/2676-156-0x00000000063E0000-0x00000000063F0000-memory.dmp
memory/2676-1-0x00000000069C0000-0x0000000006F64000-memory.dmp
memory/2676-0-0x0000000000EC0000-0x000000000198A000-memory.dmp
memory/2676-170-0x000000000AA10000-0x000000000AA1A000-memory.dmp
memory/2676-169-0x000000000AEE0000-0x000000000AEF2000-memory.dmp
memory/2676-2384-0x00000000063E0000-0x00000000063F0000-memory.dmp
memory/2676-2397-0x00000000063E0000-0x00000000063F0000-memory.dmp
memory/2676-2406-0x00000000063E0000-0x00000000063F0000-memory.dmp
memory/2676-2407-0x00000000063E0000-0x00000000063F0000-memory.dmp