Analysis
- max time kernel
150s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
24/07/2026, 02:11
General
- Target e8a54bdcd9c4d32fe17b133ddf08ad59cfdcff5fd25757726b9b004f2dc319f6.exe
- Size 1.6MB
- Sample260724-cl89vs1ejg
- SHA256 e8a54bdcd9c4d32fe17b133ddf08ad59cfdcff5fd25757726b9b004f2dc319f6
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e8a54bdcd9c4d32fe17b133ddf08ad59cfdcff5fd25757726b9b004f2dc319f6.exe"C:\Users\Admin\AppData\Local\Temp\e8a54bdcd9c4d32fe17b133ddf08ad59cfdcff5fd25757726b9b004f2dc319f6.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1524-1-0x000002170ABE0000-0x000002170AC1A000-memory.dmp
memory/1524-0-0x0000021723100000-0x0000021723110000-memory.dmp
memory/1524-2-0x0000021723100000-0x0000021723110000-memory.dmp
memory/1524-3-0x0000021723100000-0x0000021723110000-memory.dmp
memory/1524-4-0x0000021723100000-0x0000021723110000-memory.dmp
memory/1524-5-0x0000021725660000-0x0000021725668000-memory.dmp
memory/1524-6-0x00000217256E0000-0x0000021725718000-memory.dmp
memory/1524-7-0x00000217256B0000-0x00000217256BE000-memory.dmp
memory/1524-12-0x0000021723100000-0x0000021723110000-memory.dmp
memory/1524-14-0x0000021723100000-0x0000021723110000-memory.dmp
memory/1524-13-0x0000021723100000-0x0000021723110000-memory.dmp
memory/1524-15-0x0000021723100000-0x0000021723110000-memory.dmp
memory/1524-17-0x0000021723100000-0x0000021723110000-memory.dmp
memory/1524-16-0x0000021724920000-0x0000021724B17000-memory.dmp
memory/1524-18-0x0000021724920000-0x0000021724B17000-memory.dmp
memory/1524-19-0x0000021724920000-0x0000021724B17000-memory.dmp
memory/1524-20-0x0000021724920000-0x0000021724B17000-memory.dmp
memory/1524-21-0x0000021724920000-0x0000021724B17000-memory.dmp
memory/1524-22-0x0000021724920000-0x0000021724B17000-memory.dmp
memory/1524-23-0x0000021724920000-0x0000021724B17000-memory.dmp
memory/1524-24-0x0000021724920000-0x0000021724B17000-memory.dmp
memory/1524-25-0x0000021724920000-0x0000021724B17000-memory.dmp
memory/1524-26-0x0000021724920000-0x0000021724B17000-memory.dmp
memory/1524-27-0x0000021724920000-0x0000021724B17000-memory.dmp
memory/1524-28-0x0000021724920000-0x0000021724B17000-memory.dmp
memory/1524-29-0x0000021724920000-0x0000021724B17000-memory.dmp
memory/1524-30-0x0000021724920000-0x0000021724B17000-memory.dmp