Analysis
- max time kernel
150s - max time network
133s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
- submitted
20/07/2026, 13:13
General
- Target 180e93a091f8ab584a827da92c560c78f468c45f2539f73ab2deb308fb837b38.exe
- Size 691KB
- Sample260720-qf8yssbt2m
- SHA256 180e93a091f8ab584a827da92c560c78f468c45f2539f73ab2deb308fb837b38
Malware Config
Signatures
- Suspicious use of SetThreadContext 1 IoCs
- Suspicious behavior: RenamesItself 1 IoCs
- Suspicious use of WriteProcessMemory 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\180e93a091f8ab584a827da92c560c78f468c45f2539f73ab2deb308fb837b38.exe"C:\Users\Admin\AppData\Local\Temp\180e93a091f8ab584a827da92c560c78f468c45f2539f73ab2deb308fb837b38.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\defrag.exeC:\Windows\system32\defrag.exe2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4912-3-0x00000269E41E0000-0x00000269E41E1000-memory.dmp
memory/4912-4-0x00000269E41F0000-0x00000269E41F1000-memory.dmp
memory/4912-2-0x00000269E41D0000-0x00000269E41D1000-memory.dmp
memory/4912-1-0x00000269E41C0000-0x00000269E41C1000-memory.dmp
memory/4912-0-0x00000269E3FD0000-0x00000269E3FD1000-memory.dmp
memory/4912-11-0x00000269E4250000-0x00000269E4251000-memory.dmp
memory/4912-10-0x00000269E4240000-0x00000269E4241000-memory.dmp
memory/4912-9-0x00000269E4230000-0x00000269E4231000-memory.dmp
memory/4912-8-0x00000269E4220000-0x00000269E4221000-memory.dmp
memory/4912-6-0x00000269E4200000-0x00000269E4201000-memory.dmp
memory/4912-12-0x00000269E4260000-0x00000269E4261000-memory.dmp
memory/4912-5-0x00000269E4470000-0x00000269E4471000-memory.dmp
memory/4912-13-0x00000269E4280000-0x00000269E4281000-memory.dmp
memory/4912-7-0x00000269E4210000-0x00000269E4211000-memory.dmp
memory/4912-14-0x00000269E4290000-0x00000269E4291000-memory.dmp
memory/4912-15-0x00000269E42A0000-0x00000269E42A1000-memory.dmp
memory/4912-22-0x00000269E4310000-0x00000269E4311000-memory.dmp
memory/4912-17-0x00000269E42C0000-0x00000269E42C1000-memory.dmp
memory/4912-21-0x00000269E4300000-0x00000269E4301000-memory.dmp
memory/4912-18-0x00000269E42D0000-0x00000269E42D1000-memory.dmp
memory/4912-19-0x00000269E42E0000-0x00000269E42E1000-memory.dmp
memory/4912-16-0x00000269E42B0000-0x00000269E42B1000-memory.dmp
memory/4912-20-0x00000269E42F0000-0x00000269E42F1000-memory.dmp
memory/4912-23-0x00007FF6F5DA0000-0x00007FF6F635C000-memory.dmp