Analysis
- max time kernel
148s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
24/07/2026, 17:45
General
- Target plugin-container.exe
- Size 141KB
- Sample260724-wb4feahg59
- SHA256 b2f2b9a3a712125a06b303344b7a0dc57f91ee6f1749c731ca2260931dbe24e9
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 16 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\plugin-container.exe"C:\Users\Admin\AppData\Local\Temp\plugin-container.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\plugin-container.exe"C:\Users\Admin\AppData\Local\Temp\plugin-container.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
precache.db
precache.db
precache.db
precache.db
precache.db
memory/1440-13-0x00007FF86FF70000-0x00007FF87005F000-memory.dmp
memory/1440-11-0x00007FF870CB0000-0x00007FF870D9F000-memory.dmp
memory/1440-20-0x00007FF86F280000-0x00007FF86F57D000-memory.dmp
memory/1440-18-0x00007FF86F880000-0x00007FF86FB79000-memory.dmp
memory/1440-17-0x00007FF86FB80000-0x00007FF86FC97000-memory.dmp
memory/1440-16-0x00007FF86FCA0000-0x00007FF86FD83000-memory.dmp
memory/1440-14-0x00007FF86FE80000-0x00007FF86FF6F000-memory.dmp
memory/1440-21-0x00007FF86F1A0000-0x00007FF86F275000-memory.dmp
memory/1440-12-0x00007FF870BC0000-0x00007FF870CAF000-memory.dmp
memory/1440-22-0x00007FF86E960000-0x00007FF86F1A0000-memory.dmp
memory/1440-10-0x00007FF877A30000-0x00007FF877B1F000-memory.dmp
memory/1440-9-0x00007FF87D8A0000-0x00007FF87D98F000-memory.dmp
memory/1440-7-0x00007FF870060000-0x00007FF870699000-memory.dmp
memory/1440-6-0x00007FF87DDB0000-0x00007FF87DE87000-memory.dmp
memory/1440-8-0x00007FF87DC30000-0x00007FF87DD1F000-memory.dmp
memory/1440-19-0x00007FF86F580000-0x00007FF86F87A000-memory.dmp
memory/1440-15-0x00007FF86FD90000-0x00007FF86FE7F000-memory.dmp
memory/3592-5-0x00007FF870060000-0x00007FF870699000-memory.dmp
memory/3592-4-0x00007FF87DDB0000-0x00007FF87DE87000-memory.dmp