Analysis
- max time kernel
150s - max time network
114s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/07/2026, 08:57
General
- Target ScryptoClient.exe
- Size 69.6MB
- Sample260710-kww2aahv3x
- SHA256 961cb270c44ef73a9fe43f1a17313adb6a0fd481fcfbc392bedf3940b680e3e9
Malware Config
Signatures
- Loads dropped DLL 3 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ScryptoClient.exe"C:\Users\Admin\AppData\Local\Temp\ScryptoClient.exe"1⤵
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
D3DCompiler_47_cor3.dll
PresentationNative_cor3.dll
wpfgfx_cor3.dll
memory/2288-116-0x000002B705020000-0x000002B705040000-memory.dmp
memory/2288-101-0x000002B704EF0000-0x000002B704FB0000-memory.dmp
memory/2288-17-0x000002B70EE30000-0x000002B70EF90000-memory.dmp
memory/2288-49-0x000002B701580000-0x000002B7015A0000-memory.dmp
memory/2288-45-0x000002B7004F0000-0x000002B700510000-memory.dmp
memory/2288-69-0x000002B703480000-0x000002B7034A0000-memory.dmp
memory/2288-65-0x000002B7034D0000-0x000002B703500000-memory.dmp
memory/2288-80-0x000002B703520000-0x000002B703570000-memory.dmp
memory/2288-25-0x000002B700110000-0x000002B700150000-memory.dmp
memory/2288-96-0x000002B7038A0000-0x000002B7038D0000-memory.dmp
memory/2288-84-0x000002B704350000-0x000002B704AF0000-memory.dmp
memory/2288-61-0x000002B703460000-0x000002B703480000-memory.dmp
memory/2288-88-0x000002B703830000-0x000002B703860000-memory.dmp
memory/2288-57-0x000002B703420000-0x000002B703460000-memory.dmp
memory/2288-53-0x000002B703370000-0x000002B703390000-memory.dmp
memory/2288-108-0x000002B7035A0000-0x000002B7035B0000-memory.dmp
memory/2288-104-0x000002B703A20000-0x000002B703A40000-memory.dmp
memory/2288-5-0x000002B70FC40000-0x000002B7108D0000-memory.dmp
memory/2288-21-0x000002B700080000-0x000002B7000D0000-memory.dmp
memory/2288-112-0x000002B703B40000-0x000002B703B90000-memory.dmp
memory/2288-79-0x000002B7036C0000-0x000002B7037D0000-memory.dmp
memory/2288-92-0x000002B703960000-0x000002B7039F0000-memory.dmp
memory/2288-41-0x000002B700020000-0x000002B700030000-memory.dmp
memory/2288-37-0x000002B700170000-0x000002B700190000-memory.dmp
memory/2288-33-0x000002B700220000-0x000002B7002A0000-memory.dmp
memory/2288-29-0x000002B700D50000-0x000002B701580000-memory.dmp
memory/2288-120-0x000002B705AF0000-0x000002B705B20000-memory.dmp
memory/2288-128-0x000002B705B20000-0x000002B705B40000-memory.dmp
memory/2288-124-0x000002B705D70000-0x000002B705EE0000-memory.dmp
memory/2288-134-0x000002B7062E0000-0x000002B706330000-memory.dmp
memory/2288-9-0x000002B711F10000-0x000002B712E70000-memory.dmp
memory/2288-13-0x000002B710B00000-0x000002B710D30000-memory.dmp
memory/2288-143-0x000002B7063C0000-0x000002B706430000-memory.dmp
memory/2288-155-0x000002B705050000-0x000002B705060000-memory.dmp
memory/2288-159-0x000002B706260000-0x000002B706270000-memory.dmp
memory/2288-151-0x000002B706460000-0x000002B7064A0000-memory.dmp
memory/2288-147-0x000002B7089C0000-0x000002B708A20000-memory.dmp
memory/2288-163-0x000002B706450000-0x000002B706460000-memory.dmp