Analysis

  • max time kernel
    150s
  • max time network
    116s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    24/07/2026, 13:32

General

  • Target
    a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe
  • Size 1.6MB
  • Sample260724-qs8tkazvcz
  • SHA256 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe
    "C:\Users\Admin\AppData\Local\Temp\a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:1344

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/1344-1-0x000001EB11790000-0x000001EB117C6000-memory.dmp

        memory/1344-0-0x00007FF8B85AF000-0x00007FF8B85B0000-memory.dmp

        memory/1344-2-0x00007FF8B8420000-0x00007FF8B8DC4000-memory.dmp

        memory/1344-3-0x00007FF8B8420000-0x00007FF8B8DC4000-memory.dmp

        memory/1344-4-0x00007FF8B8420000-0x00007FF8B8DC4000-memory.dmp

        memory/1344-5-0x00007FF8B8420000-0x00007FF8B8DC4000-memory.dmp

        memory/1344-6-0x00007FF8B8420000-0x00007FF8B8DC4000-memory.dmp

        memory/1344-7-0x00007FF8B8420000-0x00007FF8B8DC4000-memory.dmp

        memory/1344-8-0x00007FF8B8420000-0x00007FF8B8DC4000-memory.dmp

        memory/1344-9-0x00007FF8B8420000-0x00007FF8B8DC4000-memory.dmp

        memory/1344-10-0x00007FF8B8420000-0x00007FF8B8DC4000-memory.dmp

        memory/1344-11-0x00007FF8B8420000-0x00007FF8B8DC4000-memory.dmp

        memory/1344-12-0x000001EB2F230000-0x000001EB2F238000-memory.dmp

        memory/1344-14-0x000001EB2F280000-0x000001EB2F28E000-memory.dmp

        memory/1344-17-0x00007FF8B8420000-0x00007FF8B8DC4000-memory.dmp

        memory/1344-18-0x00007FF8B8420000-0x00007FF8B8DC4000-memory.dmp

        memory/1344-13-0x000001EB2F2B0000-0x000001EB2F2EE000-memory.dmp

        memory/1344-21-0x00007FF8B8420000-0x00007FF8B8DC4000-memory.dmp

        memory/1344-22-0x00007FF8B8420000-0x00007FF8B8DC4000-memory.dmp

        memory/1344-23-0x00007FF8B8420000-0x00007FF8B8DC4000-memory.dmp

        memory/1344-24-0x00007FF8B8420000-0x00007FF8B8DC4000-memory.dmp

        memory/1344-25-0x00007FF8B8420000-0x00007FF8B8DC4000-memory.dmp

        memory/1344-26-0x00007FF8B8420000-0x00007FF8B8DC4000-memory.dmp