Analysis
- max time kernel
150s - max time network
153s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
26/07/2026, 17:37
General
- Target Loader.exe
- Size 93.3MB
- Sample260726-v7cf5ayfra
- SHA256 dcb381b1d82d602bae96815db9cbf80a6b57b25e22b47a794940803594465aed
Malware Config
Signatures
- Looks up external IP address via web service 2 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
- Maps connected drives based on registry 3 TTPs 3 IoCs
Disk information is often read in order to detect sandboxing environments.
- Checks SCSI registry key(s) 3 TTPs 4 IoCs
SCSI information is often read in order to detect sandboxing environments.
- Checks processor information in registry 2 TTPs 24 IoCs
Processor information is often read in order to detect sandboxing environments.
- Enumerates system info in registry 2 TTPs 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Loader.exe"C:\Users\Admin\AppData\Local\Temp\Loader.exe"1⤵
- Maps connected drives based on registry
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4696-0-0x000001D50D412000-0x000001D50D413000-memory.dmp
memory/4696-1-0x000001D50D410000-0x000001D50D411000-memory.dmp
memory/4696-3-0x000001D50D414000-0x000001D50D415000-memory.dmp
memory/4696-2-0x000001D50D413000-0x000001D50D414000-memory.dmp
memory/4696-4-0x000001D50D415000-0x000001D50D416000-memory.dmp
memory/4696-15-0x000001D50D418000-0x000001D50D419000-memory.dmp
memory/4696-17-0x000001D50D411000-0x000001D50D412000-memory.dmp
memory/4696-16-0x000001D54D40D000-0x000001D54D40E000-memory.dmp
memory/4696-14-0x000001D50D416000-0x000001D50D417000-memory.dmp
memory/4696-23-0x000001D50D419000-0x000001D50D41B000-memory.dmp
memory/4696-40-0x000001D50D41C000-0x000001D50D41D000-memory.dmp
memory/4696-30-0x000001D50D41B000-0x000001D50D41C000-memory.dmp
memory/4696-44-0x000001D50D414000-0x000001D50D415000-memory.dmp
memory/4696-43-0x000001D50D420000-0x000001D50D421000-memory.dmp
memory/4696-42-0x000001D50D41E000-0x000001D50D420000-memory.dmp
memory/4696-41-0x000001D50D412000-0x000001D50D413000-memory.dmp
memory/4696-39-0x000001D50D41D000-0x000001D50D41E000-memory.dmp
memory/4696-45-0x000001D4BF000000-0x000001D4C0000000-memory.dmp
memory/4696-46-0x000001D54D40E000-0x000001D54D40F000-memory.dmp
memory/4696-47-0x000001D4BF000000-0x000001D4C0000000-memory.dmp
memory/4696-49-0x000001D50D423000-0x000001D50D424000-memory.dmp
memory/4696-48-0x000001D50D421000-0x000001D50D422000-memory.dmp
memory/4696-61-0x000001D50D424000-0x000001D50D425000-memory.dmp
memory/4696-69-0x000001D50D42C000-0x000001D50D42D000-memory.dmp
memory/4696-68-0x000001D50D42B000-0x000001D50D42C000-memory.dmp
memory/4696-67-0x000001D50D42A000-0x000001D50D42B000-memory.dmp
memory/4696-66-0x000001D50D429000-0x000001D50D42A000-memory.dmp
memory/4696-65-0x000001D50D428000-0x000001D50D429000-memory.dmp
memory/4696-64-0x000001D50D427000-0x000001D50D428000-memory.dmp
memory/4696-63-0x000001D50D426000-0x000001D50D427000-memory.dmp
memory/4696-62-0x000001D50D425000-0x000001D50D426000-memory.dmp
memory/4696-71-0x000001D50D42D000-0x000001D50D42E000-memory.dmp
memory/4696-70-0x000001D4BF000000-0x000001D4C0000000-memory.dmp
memory/4696-73-0x000001D50D42E000-0x000001D50D430000-memory.dmp
memory/4696-74-0x000001D4BF000000-0x000001D4C0000000-memory.dmp
memory/4696-78-0x000001D50D433000-0x000001D50D434000-memory.dmp
memory/4696-75-0x000001D50D417000-0x000001D50D418000-memory.dmp
memory/4696-72-0x000001D4BF000000-0x000001D4C0000000-memory.dmp
memory/4696-81-0x000001D50D435000-0x000001D50D436000-memory.dmp
memory/4696-80-0x000001D50D434000-0x000001D50D435000-memory.dmp
memory/4696-79-0x000001D50D432000-0x000001D50D433000-memory.dmp
memory/4696-77-0x000001D50D430000-0x000001D50D431000-memory.dmp
memory/4696-76-0x000001D50D431000-0x000001D50D432000-memory.dmp
memory/4696-82-0x000001D4BF000000-0x000001D4C0000000-memory.dmp
memory/4696-83-0x000001D4BF000000-0x000001D4C0000000-memory.dmp
memory/4696-84-0x000001D4BF000000-0x000001D4C0000000-memory.dmp
memory/4696-85-0x000001D4BF000000-0x000001D4C0000000-memory.dmp
memory/4696-86-0x000001D4BF000000-0x000001D4C0000000-memory.dmp
memory/4696-87-0x000001D4BF000000-0x000001D4C0000000-memory.dmp
memory/4696-88-0x000001D4BF000000-0x000001D4C0000000-memory.dmp
memory/4696-89-0x000001D4BF000000-0x000001D4C0000000-memory.dmp
memory/4696-90-0x000001D4BF000000-0x000001D4C0000000-memory.dmp
memory/4696-92-0x000001D50D438000-0x000001D50D439000-memory.dmp
memory/4696-93-0x000001D50D422000-0x000001D50D423000-memory.dmp
memory/4696-91-0x000001D4BF000000-0x000001D4C0000000-memory.dmp
memory/4696-94-0x000001D4BF000000-0x000001D4C0000000-memory.dmp