Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
23/07/2026, 14:06
General
- Target $_34_.exe
- Size 2.6MB
- Sample260723-ree5rsdr21
- SHA256 8a59f5b20108c400bc0016b4f06c961d97d5cf84d9a190e0cfdf74fa72ed7a7e
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\$_34_.exe"C:\Users\Admin\AppData\Local\Temp\$_34_.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
console.log
console.log
memory/5888-4-0x00007FFE41100000-0x00007FFE41AA4000-memory.dmp
memory/5888-12-0x000000001B730000-0x000000001B78E000-memory.dmp
memory/5888-5-0x000000001BFF0000-0x000000001C570000-memory.dmp
memory/5888-0-0x00007FFE4128F000-0x00007FFE41290000-memory.dmp
memory/5888-6-0x00007FFE41100000-0x00007FFE41AA4000-memory.dmp
memory/5888-7-0x000000001D460000-0x000000001E348000-memory.dmp
memory/5888-8-0x000000001C570000-0x000000001C6D4000-memory.dmp
memory/5888-9-0x000000001BEA0000-0x000000001BFC2000-memory.dmp
memory/5888-10-0x000000001C6E0000-0x000000001C7FE000-memory.dmp
memory/5888-3-0x00007FFE41100000-0x00007FFE41AA4000-memory.dmp
memory/5888-13-0x0000000002F00000-0x0000000002F54000-memory.dmp
memory/5888-11-0x000000001C9E0000-0x000000001CB98000-memory.dmp
memory/5888-14-0x000000001BA30000-0x000000001BA46000-memory.dmp
memory/5888-2-0x00007FFE41100000-0x00007FFE41AA4000-memory.dmp
memory/5888-1-0x0000000000960000-0x0000000000BF2000-memory.dmp
memory/5888-34-0x000000001B7F0000-0x000000001B806000-memory.dmp
memory/5888-54-0x00007FFE41100000-0x00007FFE41AA4000-memory.dmp
memory/5888-55-0x00007FFE41100000-0x00007FFE41AA4000-memory.dmp
memory/5888-56-0x00007FFE41100000-0x00007FFE41AA4000-memory.dmp
memory/5888-60-0x00007FFE41100000-0x00007FFE41AA4000-memory.dmp