Analysis

  • max time kernel
    148s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    29/07/2026, 04:25

General

  • Target
    169f2d629c4e4ebd67a79f2f2fdf0629a0d370dc590d2b79064ab3463fdab211.exe
  • Size 1.8MB
  • Sample260729-e157vstgrh
  • SHA256 169f2d629c4e4ebd67a79f2f2fdf0629a0d370dc590d2b79064ab3463fdab211
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\169f2d629c4e4ebd67a79f2f2fdf0629a0d370dc590d2b79064ab3463fdab211.exe
    "C:\Users\Admin\AppData\Local\Temp\169f2d629c4e4ebd67a79f2f2fdf0629a0d370dc590d2b79064ab3463fdab211.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:1032

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        ag.log

        • Path C:\Users\Public\ag.log
        • Size 79B
        • SHA256 db1ea2930bbeea4170cf3513ed5e964421930e6c8f2fa209373b8ebf10afc855
        • MD5 SHA1 SHA512 TLSH

        ag.log

        • Path C:\Users\Public\ag.log
        • Size 21B
        • SHA256 37ab1a8a6bfb6e3174d8eea30f6527e6021f5f76a7cc850e8b1d7ca2cdd0fe59
        • MD5 SHA1 SHA512

        memory/1032-15-0x000002D3F2F50000-0x000002D3F2F51000-memory.dmp

        memory/1032-20-0x0000000067700000-0x0000000067ED4000-memory.dmp

        memory/1032-27-0x000002D3F47E0000-0x000002D3F647D000-memory.dmp

        memory/1032-31-0x000002D3F47E0000-0x000002D3F647D000-memory.dmp