Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
22/07/2026, 15:19
General
- Target 1e49f0185153aa2526dec2e25defe81db104aec27c97afce0e00cc26aa061eea.exe
- Size 870KB
- Sample260722-sql8wsbr2x
- SHA256 1e49f0185153aa2526dec2e25defe81db104aec27c97afce0e00cc26aa061eea
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\1e49f0185153aa2526dec2e25defe81db104aec27c97afce0e00cc26aa061eea.exe"C:\Users\Admin\AppData\Local\Temp\1e49f0185153aa2526dec2e25defe81db104aec27c97afce0e00cc26aa061eea.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3052-0-0x000002436F970000-0x000002436FA48000-memory.dmp
memory/3052-1-0x000002436FE20000-0x000002436FE3E000-memory.dmp
memory/3052-4-0x00000243717B0000-0x00000243717BE000-memory.dmp
memory/3052-3-0x0000024371780000-0x000002437178A000-memory.dmp
memory/3052-2-0x000002436FE40000-0x000002436FE4C000-memory.dmp
memory/3052-5-0x0000024371EB0000-0x0000024371EBA000-memory.dmp
memory/3052-6-0x0000024371F00000-0x0000024371F3E000-memory.dmp
memory/3052-9-0x0000024371EF0000-0x0000024371F00000-memory.dmp
memory/3052-8-0x0000024371EC0000-0x0000024371EC8000-memory.dmp
memory/3052-7-0x0000024371EA0000-0x0000024371EA8000-memory.dmp
memory/3052-12-0x00000243720B0000-0x00000243720B8000-memory.dmp
memory/3052-11-0x00000243720A0000-0x00000243720A8000-memory.dmp
memory/3052-10-0x0000024372090000-0x0000024372098000-memory.dmp
memory/3052-13-0x0000024371EE0000-0x0000024371EE8000-memory.dmp
memory/3052-14-0x00000243720D0000-0x00000243720D8000-memory.dmp
memory/3052-15-0x00000243720E0000-0x00000243720E8000-memory.dmp
memory/3052-16-0x00000243720C0000-0x00000243720C8000-memory.dmp
memory/3052-17-0x00000243720F0000-0x00000243720F8000-memory.dmp
memory/3052-18-0x0000024372260000-0x0000024372268000-memory.dmp
memory/3052-19-0x0000024372290000-0x00000243722A2000-memory.dmp
memory/3052-20-0x0000024372280000-0x0000024372288000-memory.dmp
memory/3052-21-0x00000243724B0000-0x00000243724B8000-memory.dmp