Resubmissions
25/07/2026, 18:06
260725-wpt4wsem3w312/07/2026, 01:21
260712-bqvftsdz5x312/07/2026, 01:20
260712-bqh3ssbx2q312/07/2026, 01:16
260712-bm78hsdz3s306/07/2026, 23:44
260706-3rc2qaaw2n3Analysis
- user interaction
yes - max time kernel
49s - max time network
26s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
12/07/2026, 01:21
General
- Target KXO loader boot v2.exe
- Size 9KB
- Sample260712-bqvftsdz5x
- SHA256 3d9f9903091d82903b8e0c4e6afe5b9e53728eefe737fd891d819fb79718ce7e
Malware Config
Signatures
- Suspicious use of FindShellTrayWindow 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\KXO loader boot v2.exe"C:\Users\Admin\AppData\Local\Temp\KXO loader boot v2.exe"1⤵
- Suspicious use of FindShellTrayWindow
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5824-0-0x00007FFCD4EDF000-0x00007FFCD4EE0000-memory.dmp
memory/5824-1-0x0000000000660000-0x0000000000668000-memory.dmp
memory/5824-2-0x00007FFCD4D50000-0x00007FFCD56F4000-memory.dmp
memory/5824-3-0x00007FFCD4D50000-0x00007FFCD56F4000-memory.dmp
memory/5824-4-0x00007FFCD4D50000-0x00007FFCD56F4000-memory.dmp
memory/5824-5-0x00007FFCD4D50000-0x00007FFCD56F4000-memory.dmp
memory/5824-6-0x00007FFCD4D50000-0x00007FFCD56F4000-memory.dmp
memory/5824-7-0x00007FFCD4D50000-0x00007FFCD56F4000-memory.dmp
memory/5824-8-0x00007FFCD4D50000-0x00007FFCD56F4000-memory.dmp
memory/5824-9-0x00007FFCD4D50000-0x00007FFCD56F4000-memory.dmp
memory/5824-10-0x00007FFCD4D50000-0x00007FFCD56F4000-memory.dmp