Analysis
- user interaction
yes - max time kernel
11s - max time network
11s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
- submitted
18/07/2026, 16:02
General
- Target WandEnhancer.exe
- Size 1.1MB
- Sample260718-tgr88aav2s
- SHA256 0b1849959da8b38dc78f4a2d7180432fac07236bd88e3bf43abe623a7fc71b47
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\WandEnhancer.exe"C:\Users\Admin\AppData\Local\Temp\WandEnhancer.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1896-0-0x00007FFCC5E2F000-0x00007FFCC5E30000-memory.dmp
memory/1896-1-0x0000000000100000-0x0000000000226000-memory.dmp
memory/1896-2-0x00007FFCC5CA0000-0x00007FFCC6644000-memory.dmp
memory/1896-3-0x00007FFCC5CA0000-0x00007FFCC6644000-memory.dmp
memory/1896-4-0x00007FFCC5CA0000-0x00007FFCC6644000-memory.dmp
memory/1896-5-0x00007FFCC5CA0000-0x00007FFCC6644000-memory.dmp
memory/1896-6-0x00007FFCC5CA0000-0x00007FFCC6644000-memory.dmp
memory/1896-7-0x00007FFCC5CA0000-0x00007FFCC6644000-memory.dmp
memory/1896-8-0x0000000001420000-0x0000000001428000-memory.dmp
memory/1896-10-0x0000000001470000-0x000000000147E000-memory.dmp
memory/1896-9-0x000000001BFA0000-0x000000001BFDE000-memory.dmp
memory/1896-11-0x00007FFCC5CA0000-0x00007FFCC6644000-memory.dmp
memory/1896-12-0x00007FFCC5CA0000-0x00007FFCC6644000-memory.dmp
memory/1896-13-0x00007FFCC5CA0000-0x00007FFCC6644000-memory.dmp
memory/1896-14-0x00007FFCC5CA0000-0x00007FFCC6644000-memory.dmp
memory/1896-15-0x00007FFCC5CA0000-0x00007FFCC6644000-memory.dmp