Analysis
- max time kernel
150s - max time network
142s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
24/07/2026, 12:14
General
- Target Portable10.1.7/AutoPico.exe
- Size 722KB
- Sample260724-petxtaga29
- SHA256 c6603d416dfc48894eda35d9a9a8523bdf9823e215ab926783ce6848aa8a62c4
Malware Config
Signatures
- Event Triggered Execution: Image File Execution Options Injection 1 TTPs 3 IoCs
- Indicator Removal: Clear Persistence 1 TTPs 1 IoCs
remove IFEO.
- Drops file in Windows directory 2 IoCs
- Modifies Control Panel 1 IoCs
- Suspicious behavior: EnumeratesProcesses 2 IoCs
- Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Portable10.1.7\AutoPico.exe"C:\Users\Admin\AppData\Local\Temp\Portable10.1.7\AutoPico.exe"1⤵
- Event Triggered Execution: Image File Execution Options Injection
- Indicator Removal: Clear Persistence
- Drops file in Windows directory
- Modifies Control Panel
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
AutoPico.log
memory/4280-12-0x00007FFE66E30000-0x00007FFE677D4000-memory.dmp
memory/4280-16-0x00007FFE66E30000-0x00007FFE677D4000-memory.dmp
memory/4280-3-0x00007FFE66E30000-0x00007FFE677D4000-memory.dmp
memory/4280-6-0x00007FFE66E30000-0x00007FFE677D4000-memory.dmp
memory/4280-7-0x00007FFE66E30000-0x00007FFE677D4000-memory.dmp
memory/4280-8-0x00007FFE66E30000-0x00007FFE677D4000-memory.dmp
memory/4280-10-0x00007FFE66E30000-0x00007FFE677D4000-memory.dmp
memory/4280-0-0x00007FFE66FBF000-0x00007FFE66FC0000-memory.dmp
memory/4280-2-0x00007FFE66E30000-0x00007FFE677D4000-memory.dmp
memory/4280-1-0x0000000000710000-0x00000000007CA000-memory.dmp
memory/4280-15-0x00007FFE66E30000-0x00007FFE677D4000-memory.dmp
memory/4280-220-0x00007FFE66E30000-0x00007FFE677D4000-memory.dmp
memory/4280-240-0x00007FFE66E30000-0x00007FFE677D4000-memory.dmp
memory/4280-242-0x00007FFE66E30000-0x00007FFE677D4000-memory.dmp
memory/4280-245-0x00007FFE66E30000-0x00007FFE677D4000-memory.dmp
memory/4280-263-0x00007FFE66E30000-0x00007FFE677D4000-memory.dmp
memory/4280-306-0x00007FFE66E30000-0x00007FFE677D4000-memory.dmp