Analysis
- user interaction
yes - max time kernel
150s - max time network
138s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
27/07/2026, 15:29
General
- Target whatStrap.exe
- Size 68.8MB
- Sample260727-sw2krswbpg
- SHA256 8bf47ae4e39be0d7a2a2aac97894bde6751104335d48ce4660631b0f1bce4568
Malware Config
Signatures
- Loads dropped DLL 3 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\whatStrap.exe"C:\Users\Admin\AppData\Local\Temp\whatStrap.exe"1⤵
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
D3DCompiler_47_cor3.dll
PresentationNative_cor3.dll
wpfgfx_cor3.dll
memory/4656-61-0x000001AC87790000-0x000001AC877B0000-memory.dmp
memory/4656-53-0x000001AC87750000-0x000001AC87770000-memory.dmp
memory/4656-29-0x000001AC85150000-0x000001AC85980000-memory.dmp
memory/4656-69-0x000001AC87860000-0x000001AC87880000-memory.dmp
memory/4656-65-0x000001AC878B0000-0x000001AC878E0000-memory.dmp
memory/4656-45-0x000001AC845A0000-0x000001AC845C0000-memory.dmp
memory/4656-84-0x000001AC88720000-0x000001AC88EC0000-memory.dmp
memory/4656-88-0x000001AC87C30000-0x000001AC87C60000-memory.dmp
memory/4656-92-0x000001AC87D30000-0x000001AC87DC0000-memory.dmp
memory/4656-100-0x000001AC892C0000-0x000001AC89380000-memory.dmp
memory/4656-116-0x000001AC893F0000-0x000001AC89410000-memory.dmp
memory/4656-112-0x000001AC87F10000-0x000001AC87F60000-memory.dmp
memory/4656-108-0x000001AC87970000-0x000001AC87980000-memory.dmp
memory/4656-104-0x000001AC87DF0000-0x000001AC87E10000-memory.dmp
memory/4656-96-0x000001AC87C70000-0x000001AC87CA0000-memory.dmp
memory/4656-80-0x000001AC87900000-0x000001AC87950000-memory.dmp
memory/4656-37-0x000001AC804D0000-0x000001AC804F0000-memory.dmp
memory/4656-5-0x000001AC81210000-0x000001AC81EA0000-memory.dmp
memory/4656-49-0x000001AC848F0000-0x000001AC84910000-memory.dmp
memory/4656-57-0x000001AC87800000-0x000001AC87840000-memory.dmp
memory/4656-76-0x000001AC87A90000-0x000001AC87BA0000-memory.dmp
memory/4656-41-0x000001AC81F70000-0x000001AC81F80000-memory.dmp
memory/4656-33-0x000001AC84670000-0x000001AC846F0000-memory.dmp
memory/4656-25-0x000001AC81EF0000-0x000001AC81F30000-memory.dmp
memory/4656-21-0x000001AC81EA0000-0x000001AC81EF0000-memory.dmp
memory/4656-13-0x000001AC821C0000-0x000001AC823F0000-memory.dmp
memory/4656-120-0x000001AC8A380000-0x000001AC8A4F0000-memory.dmp
memory/4656-124-0x000001AC8A1B0000-0x000001AC8A200000-memory.dmp
memory/4656-132-0x000001AC8A540000-0x000001AC8A580000-memory.dmp
memory/4656-128-0x000001AC8A5E0000-0x000001AC8A640000-memory.dmp
memory/4656-136-0x000001AC8A200000-0x000001AC8A210000-memory.dmp
memory/4656-17-0x000001AC84440000-0x000001AC845A0000-memory.dmp
memory/4656-9-0x000001AC834E0000-0x000001AC84440000-memory.dmp
memory/4656-145-0x000001AC8A8C0000-0x000001AC8AA20000-memory.dmp
memory/4656-149-0x000001AC8A6D0000-0x000001AC8A740000-memory.dmp
memory/4656-153-0x000001AC8CC30000-0x000001AC8CC40000-memory.dmp
memory/4656-157-0x000001AC8CD20000-0x000001AC8CD30000-memory.dmp