Analysis

  • user interaction
    yes
  • max time kernel
    54s
  • max time network
    29s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    30/07/2026, 14:25

General

  • Target
    HDN PANEL C# V9.1.exe
  • Size 6.9MB
  • Sample260730-rrfxtsbn3y
  • SHA256 04fd7372d5d567dd6d365eaeda92fbdcad3a8b9a19b6ea89fad1b3d7d0a10e49
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Checks BIOS information in registry 2 TTPs 1 IoCs

    BIOS information is often read in order to detect sandboxing environments.

  • Drops file in System32 directory 2 IoCs
  • Enumerates system info in registry 2 TTPs 4 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\HDN PANEL C# V9.1.exe
    "C:\Users\Admin\AppData\Local\Temp\HDN PANEL C# V9.1.exe"
    1⤵
    • Checks BIOS information in registry
    • Drops file in System32 directory
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:5464

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/5464-0-0x00007FFB0B1BF000-0x00007FFB0B1C0000-memory.dmp

        memory/5464-2-0x00007FFB0B030000-0x00007FFB0B9D4000-memory.dmp

        memory/5464-1-0x000001A762A50000-0x000001A76313A000-memory.dmp

        memory/5464-3-0x00007FFB0B030000-0x00007FFB0B9D4000-memory.dmp

        memory/5464-4-0x00007FFB0B030000-0x00007FFB0B9D4000-memory.dmp

        memory/5464-5-0x00007FFB0B030000-0x00007FFB0B9D4000-memory.dmp

        memory/5464-6-0x00007FFB0B030000-0x00007FFB0B9D4000-memory.dmp

        memory/5464-8-0x000001A77E120000-0x000001A77E132000-memory.dmp

        memory/5464-7-0x00007FFB0B030000-0x00007FFB0B9D4000-memory.dmp

        memory/5464-9-0x00007FFB0B030000-0x00007FFB0B9D4000-memory.dmp

        memory/5464-10-0x00007FFB0B030000-0x00007FFB0B9D4000-memory.dmp

        memory/5464-11-0x000001A7635E0000-0x000001A76361C000-memory.dmp

        memory/5464-12-0x00007FFB0B030000-0x00007FFB0B9D4000-memory.dmp

        memory/5464-13-0x00007FFB0B030000-0x00007FFB0B9D4000-memory.dmp

        memory/5464-14-0x00007FFB0B030000-0x00007FFB0B9D4000-memory.dmp

        memory/5464-15-0x00007FFB0B030000-0x00007FFB0B9D4000-memory.dmp

        memory/5464-16-0x00007FFB0B030000-0x00007FFB0B9D4000-memory.dmp

        memory/5464-17-0x00007FFB0B030000-0x00007FFB0B9D4000-memory.dmp

        memory/5464-18-0x00007FFB0B030000-0x00007FFB0B9D4000-memory.dmp

        memory/5464-19-0x00007FFB0B030000-0x00007FFB0B9D4000-memory.dmp

        memory/5464-20-0x00007FFB0B030000-0x00007FFB0B9D4000-memory.dmp

        memory/5464-21-0x00007FFB0B030000-0x00007FFB0B9D4000-memory.dmp

        memory/5464-22-0x00007FFB0B030000-0x00007FFB0B9D4000-memory.dmp

        memory/5464-23-0x00007FFB0B030000-0x00007FFB0B9D4000-memory.dmp

        memory/5464-24-0x00007FFB0B030000-0x00007FFB0B9D4000-memory.dmp

        memory/5464-26-0x000001A705A20000-0x000001A705C3C000-memory.dmp

        memory/5464-27-0x000001A702DF0000-0x000001A702E02000-memory.dmp

        memory/5464-29-0x000001A704F70000-0x000001A705020000-memory.dmp

        memory/5464-28-0x000001A702E10000-0x000001A702E2E000-memory.dmp

        memory/5464-30-0x00007FFB0B030000-0x00007FFB0B9D4000-memory.dmp

        memory/5464-31-0x00007FFB0B030000-0x00007FFB0B9D4000-memory.dmp

        memory/5464-33-0x00007FFB0B030000-0x00007FFB0B9D4000-memory.dmp