Analysis
- max time kernel
149s - max time network
116s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
30/07/2026, 04:41
General
- Target Lifenz Booster Utility.exe
- Size 115KB
- Sample260730-fa3vgsbh39
- SHA256 06de16f426b0b0ceaa3e5b32cac29c7dd463bbe0f44f32d21a7899345eaa9e5f
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 11 IoCs
- Suspicious use of AdjustPrivilegeToken 64 IoCs
- Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Lifenz Booster Utility.exe"C:\Users\Admin\AppData\Local\Temp\Lifenz Booster Utility.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\Admin\AppData\Local\Temp\dbvjqvcs\dbvjqvcs.cmdline"2⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exeC:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\Admin\AppData\Local\Temp\RES27C2.tmp" "c:\Users\Admin\AppData\Local\Temp\dbvjqvcs\CSC552DBFAE7C62455594EAFA2997B7E059.TMP"3⤵
-
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
RES27C2.tmp
__PSScriptPolicyTest_mfgbdqxf.wxp.ps1
dbvjqvcs.dll
CSC552DBFAE7C62455594EAFA2997B7E059.TMP
dbvjqvcs.0.cs
dbvjqvcs.cmdline
memory/4628-33-0x000000001CB80000-0x000000001CC32000-memory.dmp
memory/4628-35-0x000000001CCB0000-0x000000001CCDA000-memory.dmp
memory/4628-13-0x00007FF9A5620000-0x00007FF9A5FC4000-memory.dmp
memory/4628-8-0x00007FF9A5620000-0x00007FF9A5FC4000-memory.dmp
memory/4628-7-0x00007FF9A5620000-0x00007FF9A5FC4000-memory.dmp
memory/4628-6-0x00007FF9A5620000-0x00007FF9A5FC4000-memory.dmp
memory/4628-23-0x0000000002770000-0x000000000277C000-memory.dmp
memory/4628-5-0x000000001B490000-0x000000001B4B2000-memory.dmp
memory/4628-4-0x00007FF9A5620000-0x00007FF9A5FC4000-memory.dmp
memory/4628-24-0x00007FF9A5620000-0x00007FF9A5FC4000-memory.dmp
memory/4628-25-0x00007FF9A5620000-0x00007FF9A5FC4000-memory.dmp
memory/4628-26-0x00007FF9A5620000-0x00007FF9A5FC4000-memory.dmp
memory/4628-27-0x00007FF9A5620000-0x00007FF9A5FC4000-memory.dmp
memory/4628-28-0x00007FF9A5620000-0x00007FF9A5FC4000-memory.dmp
memory/4628-31-0x000000001C7E0000-0x000000001C7FE000-memory.dmp
memory/4628-32-0x00007FF9A5620000-0x00007FF9A5FC4000-memory.dmp
memory/4628-0-0x00007FF9A57AF000-0x00007FF9A57B0000-memory.dmp
memory/4628-34-0x000000001C2C0000-0x000000001C2CA000-memory.dmp
memory/4628-36-0x000000001CCB0000-0x000000001CCD4000-memory.dmp
memory/4628-11-0x00007FF9A5620000-0x00007FF9A5FC4000-memory.dmp
memory/4628-37-0x00007FF9A5620000-0x00007FF9A5FC4000-memory.dmp
memory/4628-39-0x00007FF9A5620000-0x00007FF9A5FC4000-memory.dmp
memory/4628-40-0x00007FF9A5620000-0x00007FF9A5FC4000-memory.dmp
memory/4628-41-0x00007FF9A5620000-0x00007FF9A5FC4000-memory.dmp
memory/4628-42-0x00007FF9A5620000-0x00007FF9A5FC4000-memory.dmp
memory/4628-1-0x0000000000520000-0x0000000000544000-memory.dmp
memory/4628-45-0x000000001CBA0000-0x000000001CBBE000-memory.dmp
memory/4628-46-0x000000001CB90000-0x000000001CB9A000-memory.dmp
memory/4628-47-0x000000001CBC0000-0x000000001CBCA000-memory.dmp
memory/4628-48-0x00007FF9A5620000-0x00007FF9A5FC4000-memory.dmp
memory/4628-49-0x00007FF9A5620000-0x00007FF9A5FC4000-memory.dmp
memory/4628-51-0x000000001E460000-0x000000001E468000-memory.dmp
memory/4628-52-0x0000000022440000-0x000000002247E000-memory.dmp
memory/4628-53-0x000000001E4B0000-0x000000001E4BE000-memory.dmp
memory/4628-54-0x00007FF9A5620000-0x00007FF9A5FC4000-memory.dmp
memory/4628-56-0x00007FF9A5620000-0x00007FF9A5FC4000-memory.dmp
memory/4628-57-0x00007FF9A5620000-0x00007FF9A5FC4000-memory.dmp
memory/4628-58-0x00007FF9A5620000-0x00007FF9A5FC4000-memory.dmp