Analysis
- max time kernel
178s - max time network
168s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
- submitted
12/07/2026, 12:16
General
- Target AIvamax-Installer.exe
- Size 919KB
- Sample260712-pfgnwabw71
- SHA256 de59779e8296eb89018adec2893d789db3f377d6d4eb2fb59b91edf36b0afec8
Malware Config
Signatures
- Drops desktop.ini file(s) 2 IoCs
- Drops file in Windows directory 3 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵
-
C:\Users\Admin\AppData\Local\Temp\AIvamax-Installer.exe"C:\Users\Admin\AppData\Local\Temp\AIvamax-Installer.exe"1⤵
- Drops desktop.ini file(s)
- Drops file in Windows directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2708-0-0x00007FFFABDFA000-0x00007FFFABDFB000-memory.dmp
memory/2708-1-0x00007FFFABB00000-0x00007FFFAC538000-memory.dmp
memory/2708-2-0x00007FFFABDFA000-0x00007FFFABDFB000-memory.dmp
memory/2708-6-0x000000001CEC0000-0x000000001D38E000-memory.dmp
memory/2708-7-0x000000001D430000-0x000000001D4CC000-memory.dmp
memory/2708-8-0x0000000001790000-0x000000000179E000-memory.dmp
memory/2708-9-0x0000000001760000-0x0000000001768000-memory.dmp
memory/2708-10-0x00007FFFABB00000-0x00007FFFAC538000-memory.dmp
memory/2708-11-0x00007FFFABB00000-0x00007FFFAC538000-memory.dmp
memory/2708-12-0x0000000020BF0000-0x0000000020C80000-memory.dmp
memory/2708-15-0x0000000020E50000-0x0000000021160000-memory.dmp
memory/2708-16-0x00007FFFABB00000-0x00007FFFAC538000-memory.dmp
memory/2708-19-0x00007FFFABB00000-0x00007FFFAC538000-memory.dmp