Analysis
- max time kernel
149s - max time network
145s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
18/07/2026, 12:16
General
- Target 3_TA5JQP9HB5PFXPH.exe
- Size 1.6MB
- Sample260718-pflmtsbs6p
- SHA256 bb4a246d527d15e77a1034b9f201e7a39593101801b70a0ec11857961cd160b2
Score
5/10
Malware Config
Signatures
- UPX packed file 8 IoCs
Detects executables packed with UPX/modified UPX open source packer.
- Suspicious use of FindShellTrayWindow 2 IoCs
- Suspicious use of SendNotifyMessage 2 IoCs
- Suspicious use of SetWindowsHookEx 6 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3_TA5JQP9HB5PFXPH.exe"C:\Users\Admin\AppData\Local\Temp\3_TA5JQP9HB5PFXPH.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\3_TA5JQP9HB5PFXPH.exe"C:\Users\Admin\AppData\Local\Temp\3_TA5JQP9HB5PFXPH.exe" /script /f "\\.\pipe\AHKIFCLLOGL"2⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
闪光.ini
闪光.ini
默认设置.ini
默认设置.ini
memory/4100-5-0x00000000032D0000-0x0000000003AD0000-memory.dmp
memory/4100-10-0x0000000140000000-0x0000000140418000-memory.dmp
memory/4100-0-0x0000000140000000-0x0000000140418000-memory.dmp
memory/4100-6-0x00000000008E0000-0x00000000009E0000-memory.dmp
memory/4100-1-0x0000000140000000-0x0000000140418000-memory.dmp
memory/4272-7-0x0000000140000000-0x0000000140418000-memory.dmp
memory/4272-105-0x0000000140000000-0x0000000140418000-memory.dmp
memory/4272-106-0x0000000140000000-0x0000000140418000-memory.dmp
memory/4272-107-0x0000000140000000-0x0000000140418000-memory.dmp
memory/4272-108-0x0000000140000000-0x0000000140418000-memory.dmp