Analysis
- max time kernel
36s - max time network
130s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260706-en - resource tags
- submitted
08/07/2026, 12:12
Errors
Reason
Task went missing from backend
General
- Target ligma Doesnt use wearedevs api/Bunifu_UI_v1.5.3.dll
- Size 236KB
- Sample260708-pc89qags6j
- SHA256 f1b3e0f2750a9103e46a6a4a34f1cf9d17779725f98042cc2475ec66484801cf
Score
1/10
Malware Config
Signatures
- Suspicious use of FindShellTrayWindow 1 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe "C:\Users\Admin\AppData\Local\Temp\ligma Doesnt use wearedevs api\Bunifu_UI_v1.5.3.dll",#11⤵
-
C:\Windows\system32\sihost.exesihost.exe1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
-
C:\Windows\explorer.exeexplorer.exe /LOADSAVEDWINDOWS2⤵
-
-
C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca1⤵
-
C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe"C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
prep_Activatable Class_Hermes_perf.cache
memory/5704-8-0x0000022B83BF0000-0x0000022B83C10000-memory.dmp
memory/5704-2-0x0000022B801E0000-0x0000022B802E0000-memory.dmp
memory/5704-30-0x0000022B841D0000-0x0000022B841F0000-memory.dmp
memory/5704-10-0x0000022B83DB0000-0x0000022B83EB0000-memory.dmp
memory/5704-18-0x0000022B83D50000-0x0000022B83D70000-memory.dmp
memory/5704-1-0x0000022B801E0000-0x0000022B802E0000-memory.dmp
memory/5716-172-0x000001EAA8000000-0x000001EAA8434000-memory.dmp