Analysis
- max time kernel
150s - max time network
134s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
22/07/2026, 15:19
General
- Target 1e49f0185153aa2526dec2e25defe81db104aec27c97afce0e00cc26aa061eea.exe
- Size 870KB
- Sample260722-sql8wsbr2x
- SHA256 1e49f0185153aa2526dec2e25defe81db104aec27c97afce0e00cc26aa061eea
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\1e49f0185153aa2526dec2e25defe81db104aec27c97afce0e00cc26aa061eea.exe"C:\Users\Admin\AppData\Local\Temp\1e49f0185153aa2526dec2e25defe81db104aec27c97afce0e00cc26aa061eea.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2292-0-0x00007FFBB23AF000-0x00007FFBB23B0000-memory.dmp
memory/2292-1-0x00000213D2240000-0x00000213D2318000-memory.dmp
memory/2292-5-0x00000213D2870000-0x00000213D287E000-memory.dmp
memory/2292-7-0x00000213D28E0000-0x00000213D291E000-memory.dmp
memory/2292-8-0x00007FFBB2220000-0x00007FFBB2BC4000-memory.dmp
memory/2292-6-0x00000213D28A0000-0x00000213D28AA000-memory.dmp
memory/2292-4-0x00000213D2850000-0x00000213D285A000-memory.dmp
memory/2292-3-0x00000213D2770000-0x00000213D277C000-memory.dmp
memory/2292-2-0x00000213D27C0000-0x00000213D27DE000-memory.dmp
memory/2292-9-0x00000213D2890000-0x00000213D2898000-memory.dmp
memory/2292-10-0x00000213D28B0000-0x00000213D28B8000-memory.dmp
memory/2292-11-0x00007FFBB2220000-0x00007FFBB2BC4000-memory.dmp
memory/2292-12-0x00007FFBB2220000-0x00007FFBB2BC4000-memory.dmp
memory/2292-14-0x00000213D2940000-0x00000213D2948000-memory.dmp
memory/2292-16-0x00000213D2920000-0x00000213D2928000-memory.dmp
memory/2292-15-0x00000213D4270000-0x00000213D4278000-memory.dmp
memory/2292-13-0x00000213D2930000-0x00000213D2938000-memory.dmp
memory/2292-19-0x00000213D43C0000-0x00000213D43C8000-memory.dmp
memory/2292-18-0x00000213D43B0000-0x00000213D43B8000-memory.dmp
memory/2292-20-0x00007FFBB2220000-0x00007FFBB2BC4000-memory.dmp
memory/2292-17-0x00000213D43A0000-0x00000213D43A8000-memory.dmp
memory/2292-22-0x00007FFBB2220000-0x00007FFBB2BC4000-memory.dmp
memory/2292-21-0x00000213D4390000-0x00000213D4398000-memory.dmp
memory/2292-23-0x00007FFBB2220000-0x00007FFBB2BC4000-memory.dmp
memory/2292-25-0x00000213ECC70000-0x00000213ECC82000-memory.dmp
memory/2292-24-0x00000213D4410000-0x00000213D4418000-memory.dmp
memory/2292-26-0x00007FFBB2220000-0x00007FFBB2BC4000-memory.dmp
memory/2292-27-0x00007FFBB2220000-0x00007FFBB2BC4000-memory.dmp
memory/2292-29-0x00000213ECD90000-0x00000213ECD98000-memory.dmp
memory/2292-28-0x00000213D4440000-0x00000213D4448000-memory.dmp
memory/2292-30-0x00007FFBB2220000-0x00007FFBB2BC4000-memory.dmp
memory/2292-31-0x00007FFBB2220000-0x00007FFBB2BC4000-memory.dmp