Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
23/07/2026, 14:06
General
- Target $_34_.exe
- Size 2.6MB
- Sample260723-ree5rsdr21
- SHA256 8a59f5b20108c400bc0016b4f06c961d97d5cf84d9a190e0cfdf74fa72ed7a7e
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\$_34_.exe"C:\Users\Admin\AppData\Local\Temp\$_34_.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
console.log
memory/1760-6-0x000000001D5B0000-0x000000001D6CE000-memory.dmp
memory/1760-2-0x000000001E200000-0x000000001F0E8000-memory.dmp
memory/1760-3-0x000000001D310000-0x000000001D474000-memory.dmp
memory/1760-4-0x000000001D480000-0x000000001D5A2000-memory.dmp
memory/1760-5-0x000000001CD40000-0x000000001CD50000-memory.dmp
memory/1760-0-0x0000000000140000-0x00000000003D2000-memory.dmp
memory/1760-7-0x000000001D890000-0x000000001DA48000-memory.dmp
memory/1760-8-0x0000000002720000-0x000000000277E000-memory.dmp
memory/1760-9-0x0000000002780000-0x00000000027D4000-memory.dmp
memory/1760-10-0x000000001CC60000-0x000000001CC76000-memory.dmp
memory/1760-1-0x000000001CD90000-0x000000001D310000-memory.dmp
memory/1760-30-0x000000001CC80000-0x000000001CC96000-memory.dmp