Analysis
- max time kernel
149s - max time network
133s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
- submitted
28/07/2026, 13:53
General
- Target 单文件制作工具 7.0.2.3865_x86_x64/单文件制作工具 7.0.2.3865_x64.exe
- Size 4.5MB
- Sample260728-q63jpsywhy
- SHA256 73e1cb95238fb28f6f7bb3064310f7a0ec801ea141dc138c83b5e122242e5927
Malware Config
Signatures
- AutoIT Executable 64 IoCs
AutoIT scripts compiled to PE executables.
- Suspicious use of AdjustPrivilegeToken 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\单文件制作工具 7.0.2.3865_x86_x64\单文件制作工具 7.0.2.3865_x64.exe"C:\Users\Admin\AppData\Local\Temp\单文件制作工具 7.0.2.3865_x86_x64\单文件制作工具 7.0.2.3865_x64.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5956-0-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-7-0x000000014011D000-0x000000014011E000-memory.dmp
memory/5956-100-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-101-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-104-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-105-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-106-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-107-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-108-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-109-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-110-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-111-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-112-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-113-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-114-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-115-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-116-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-117-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-118-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-119-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-120-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-121-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-122-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-123-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-124-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-125-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-126-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-127-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-129-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-130-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-131-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-132-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-133-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-134-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-135-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-136-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-137-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-138-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-139-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-140-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-141-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-142-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-143-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-144-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-145-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-146-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-147-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-148-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-149-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-150-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-151-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-152-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-153-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-154-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-155-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-156-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-157-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-158-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-159-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-160-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-162-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-163-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-164-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-165-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-166-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-167-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-168-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-169-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-170-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-171-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-172-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-173-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-174-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-175-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-176-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-177-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-178-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-179-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-180-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-182-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-183-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-184-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-185-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-186-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-187-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-188-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-189-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-190-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-191-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-192-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-193-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-194-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-195-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-197-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-196-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-198-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-199-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-200-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-201-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-202-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-203-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-205-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-212-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-213-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-214-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-215-0x0000000140000000-0x0000000140CFD000-memory.dmp
memory/5956-216-0x0000000140000000-0x0000000140CFD000-memory.dmp