Analysis
- user interaction
yes - max time kernel
86s - max time network
89s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
30/07/2026, 18:19
General
- Target Setup.exe
- Size 2.9MB
- Sample260730-wyl5msvbmb
- SHA256 bdaa95cfc348aee5584ba136fa917290eea070688290b324e7e34ccd7e1f3dd1
Malware Config
Signatures
- Checks system information in the registry 2 TTPs 1 IoCs
System information is often read in order to detect sandboxing environments.
- Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
Processes
-
C:\Users\Admin\AppData\Local\Temp\Setup.exe"C:\Users\Admin\AppData\Local\Temp\Setup.exe"1⤵
- Checks system information in the registry
- Checks processor information in registry
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1768-1-0x0000000140000000-0x0000000140965000-memory.dmp
memory/1768-0-0x00007FF92D5D0000-0x00007FF92D7C5000-memory.dmp
memory/1768-3-0x000001C9C57F0000-0x000001C9C57F1000-memory.dmp
memory/1768-8-0x000001C9C94D0000-0x000001C9C94D1000-memory.dmp
memory/1768-7-0x000001C9C94C0000-0x000001C9C94C1000-memory.dmp
memory/1768-6-0x000001C9C92B0000-0x000001C9C92B1000-memory.dmp
memory/1768-5-0x000001C9C9220000-0x000001C9C9221000-memory.dmp
memory/1768-4-0x000001C9C7CC0000-0x000001C9C7CC1000-memory.dmp
memory/1768-2-0x000001C9C5010000-0x000001C9C5011000-memory.dmp
memory/1768-9-0x000001C9CA050000-0x000001C9CA051000-memory.dmp
memory/1768-10-0x0000000140000000-0x0000000140965000-memory.dmp
memory/1768-11-0x0000000140000000-0x0000000140965000-memory.dmp