Analysis
- max time kernel
150s - max time network
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
12/07/2026, 01:58
General
- Target Qivnspkxz.exe
- Size 321KB
- Sample260712-cd8ncses4x
- SHA256 4ed12d2ea3bca3395ee52fdec83ec304042d30d0e070233d79299e99809749aa
Malware Config
Signatures
- Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Qivnspkxz.exe"C:\Users\Admin\AppData\Local\Temp\Qivnspkxz.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
Tmp3C73.tmp
memory/4760-0-0x0000000074D02000-0x0000000074D03000-memory.dmp
memory/4760-1-0x0000000000BC0000-0x0000000000C14000-memory.dmp
memory/4760-2-0x0000000005620000-0x0000000005638000-memory.dmp
memory/4760-3-0x0000000074CF0000-0x00000000754AC000-memory.dmp
memory/4760-4-0x00000000056B0000-0x00000000056FC000-memory.dmp
memory/4760-15-0x0000000005D10000-0x0000000005D76000-memory.dmp
memory/4760-16-0x0000000006540000-0x00000000065D2000-memory.dmp
memory/4760-17-0x0000000006BA0000-0x000000000715A000-memory.dmp
memory/4760-18-0x0000000074D02000-0x0000000074D03000-memory.dmp
memory/4760-19-0x0000000074CF0000-0x00000000754AC000-memory.dmp
memory/4760-20-0x0000000007360000-0x0000000007436000-memory.dmp
memory/4760-21-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-26-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-48-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-50-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-52-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-47-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-44-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-42-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-41-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-38-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-37-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-35-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-32-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-31-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-29-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-24-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-22-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-62-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-66-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-69-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-80-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-84-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-101-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-120-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-132-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-146-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-144-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-142-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-140-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-138-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-137-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-130-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-134-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-128-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-126-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-125-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-123-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-118-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-117-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-114-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-112-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-111-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-108-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-106-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-105-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-102-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-98-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-96-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-95-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-93-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-90-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-88-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-86-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-82-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-74-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-78-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-76-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-72-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-70-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-64-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-58-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-60-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-55-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-56-0x0000000007360000-0x0000000007431000-memory.dmp
memory/4760-3169-0x0000000074CF0000-0x00000000754AC000-memory.dmp
memory/4760-3170-0x0000000074CF0000-0x00000000754AC000-memory.dmp