Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
27/07/2026, 14:16
General
- Target ֮FPSƽ-յ/֮FPSƽ-1.10.4-��.exe
- Size 838KB
- Sample260727-rlms7avaph
- SHA256 64100fa380531c7b28fda2e86fa5c9c1b9b367bc9f6fb18d56dc96b14960ad90
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\֮FPSƽ-յ\֮FPSƽ-1.10.4-��.exe"C:\Users\Admin\AppData\Local\Temp\֮FPSƽ-յ\֮FPSƽ-1.10.4-��.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3480-0-0x00007FFB195CF000-0x00007FFB195D0000-memory.dmp
memory/3480-1-0x0000000000BA0000-0x0000000000C78000-memory.dmp
memory/3480-2-0x00007FFB19440000-0x00007FFB19DE4000-memory.dmp
memory/3480-3-0x00007FFB19440000-0x00007FFB19DE4000-memory.dmp
memory/3480-4-0x00007FFB19440000-0x00007FFB19DE4000-memory.dmp
memory/3480-5-0x00007FFB19440000-0x00007FFB19DE4000-memory.dmp
memory/3480-6-0x00007FFB19440000-0x00007FFB19DE4000-memory.dmp
memory/3480-7-0x00007FFB19440000-0x00007FFB19DE4000-memory.dmp
memory/3480-8-0x00007FFB19440000-0x00007FFB19DE4000-memory.dmp
memory/3480-9-0x00007FFB19440000-0x00007FFB19DE4000-memory.dmp
memory/3480-10-0x00007FFB19440000-0x00007FFB19DE4000-memory.dmp
memory/3480-11-0x00007FFB19440000-0x00007FFB19DE4000-memory.dmp
memory/3480-12-0x00007FFB19440000-0x00007FFB19DE4000-memory.dmp
memory/3480-13-0x00007FFB19440000-0x00007FFB19DE4000-memory.dmp
memory/3480-14-0x00007FFB19440000-0x00007FFB19DE4000-memory.dmp
memory/3480-15-0x00007FFB19440000-0x00007FFB19DE4000-memory.dmp