Analysis
- user interaction
yes - max time kernel
18s - max time network
20s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
- submitted
27/07/2026, 16:18
General
- Target SharkHack.exe
- Size 14.9MB
- Sample260727-tr2weaxtfx
- SHA256 9364cb56fbf209e835012427d8e250983a471db1baf05fb223683523c667ed18
Score
7/10
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
- Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\SharkHack.exe"C:\Users\Admin\AppData\Local\Temp\SharkHack.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\9345754adc14.exe"C:\Users\Admin\AppData\Local\Temp\9345754adc14.exe"2⤵
- Executes dropped EXE
- Suspicious use of NtSetInformationThreadHideFromDebugger
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
9345754adc14.exe
memory/3180-10-0x000002000EC40000-0x000002000ED58000-memory.dmp
memory/3180-11-0x00000200293D0000-0x00000200293E0000-memory.dmp
memory/3180-12-0x0000020010920000-0x0000020010921000-memory.dmp
memory/3180-13-0x000002002A230000-0x000002002A3F2000-memory.dmp
memory/3180-14-0x0000020010B30000-0x0000020010BA6000-memory.dmp
memory/3180-15-0x00000200293D0000-0x00000200293E0000-memory.dmp
memory/3180-16-0x000002002A930000-0x000002002AE58000-memory.dmp
memory/3180-18-0x00000200293D0000-0x00000200293E0000-memory.dmp
memory/3180-19-0x00000200293D0000-0x00000200293E0000-memory.dmp
memory/4536-17-0x00007FF6C2C50000-0x00007FF6C2E86000-memory.dmp