Analysis
- max time kernel
148s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
22/07/2026, 19:09
General
- Target 51adb769df3ac347efabde44580456ddb28276571c2046a7feed976616f7e949.exe
- Size 6.2MB
- Sample260722-xt9ktabb22
- SHA256 51adb769df3ac347efabde44580456ddb28276571c2046a7feed976616f7e949
Malware Config
Signatures
- Loads dropped DLL 3 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 1 IoCs
- Suspicious use of SendNotifyMessage 1 IoCs
- Suspicious use of SetWindowsHookEx 6 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\51adb769df3ac347efabde44580456ddb28276571c2046a7feed976616f7e949.exe"C:\Users\Admin\AppData\Local\Temp\51adb769df3ac347efabde44580456ddb28276571c2046a7feed976616f7e949.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
custom.ini
settings.ini
evbF57D.tmp
evbF57E.tmp
evbF58E.tmp
memory/4656-287-0x00007FFC08C30000-0x00007FFC08E25000-memory.dmp
memory/4656-7-0x00007FFC08C30000-0x00007FFC08E25000-memory.dmp
memory/4656-17-0x0000000010000000-0x0000000010021000-memory.dmp
memory/4656-20-0x00007FFC08C30000-0x00007FFC08E25000-memory.dmp
memory/4656-21-0x00007FFC08C30000-0x00007FFC08E25000-memory.dmp
memory/4656-23-0x00007FFC08C30000-0x00007FFC08E25000-memory.dmp
memory/4656-24-0x00007FFC08C30000-0x00007FFC08E25000-memory.dmp
memory/4656-22-0x00007FFC08C30000-0x00007FFC08E25000-memory.dmp
memory/4656-19-0x00007FFC08C30000-0x00007FFC08E25000-memory.dmp
memory/4656-13-0x0000000000620000-0x000000000063E000-memory.dmp
memory/4656-11-0x0000000000620000-0x000000000063E000-memory.dmp
memory/4656-10-0x00007FFC08C30000-0x00007FFC08E25000-memory.dmp
memory/4656-289-0x0000000000620000-0x000000000063E000-memory.dmp
memory/4656-4-0x0000000180000000-0x0000000180087000-memory.dmp
memory/4656-156-0x00007FFC08C30000-0x00007FFC08E25000-memory.dmp
memory/4656-281-0x00007FFC08C30000-0x00007FFC08E25000-memory.dmp
memory/4656-282-0x00007FFC08C30000-0x00007FFC08E25000-memory.dmp
memory/4656-283-0x00007FFC08C30000-0x00007FFC08E25000-memory.dmp
memory/4656-284-0x00007FFC08C30000-0x00007FFC08E25000-memory.dmp
memory/4656-285-0x00007FFC08C30000-0x00007FFC08E25000-memory.dmp
memory/4656-286-0x00007FFC08C30000-0x00007FFC08E25000-memory.dmp
memory/4656-0-0x0000000140000000-0x000000014035D000-memory.dmp
memory/4656-1-0x00007FFC08CCD000-0x00007FFC08CCE000-memory.dmp
memory/4656-290-0x0000000010000000-0x0000000010021000-memory.dmp
memory/4656-305-0x0000000010000000-0x0000000010021000-memory.dmp
memory/4656-291-0x0000000140000000-0x000000014035D000-memory.dmp
memory/4656-294-0x0000000010000000-0x0000000010021000-memory.dmp
memory/4656-295-0x0000000140000000-0x000000014035D000-memory.dmp
memory/4656-296-0x00007FFC08C30000-0x00007FFC08E25000-memory.dmp
memory/4656-297-0x00007FFC08C30000-0x00007FFC08E25000-memory.dmp
memory/4656-298-0x00007FFC08C30000-0x00007FFC08E25000-memory.dmp
memory/4656-288-0x0000000180000000-0x0000000180087000-memory.dmp
memory/4656-302-0x0000000140000000-0x000000014035D000-memory.dmp
memory/4656-306-0x0000000140000000-0x000000014035D000-memory.dmp
memory/4656-315-0x0000000010000000-0x0000000010021000-memory.dmp
memory/4656-312-0x0000000140000000-0x000000014035D000-memory.dmp
memory/4656-321-0x0000000140000000-0x000000014035D000-memory.dmp
memory/4656-327-0x0000000140000000-0x000000014035D000-memory.dmp
memory/4656-331-0x0000000140000000-0x000000014035D000-memory.dmp
memory/4656-335-0x0000000140000000-0x000000014035D000-memory.dmp
memory/4656-339-0x0000000140000000-0x000000014035D000-memory.dmp
memory/4656-360-0x0000000140000000-0x000000014035D000-memory.dmp
memory/4656-364-0x0000000140000000-0x000000014035D000-memory.dmp
memory/4656-378-0x0000000140000000-0x000000014035D000-memory.dmp
memory/4656-387-0x0000000140000000-0x000000014035D000-memory.dmp
memory/4656-391-0x0000000140000000-0x000000014035D000-memory.dmp
memory/4656-394-0x0000000010000000-0x0000000010021000-memory.dmp