Analysis
- user interaction
yes - max time kernel
149s - max time network
145s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
30/07/2026, 20:39
General
- Target straf3.exe
- Size 8.0MB
- Sample260730-zfbsqszthx
- SHA256 c4ac9189ff546f784ea9fbe3ce633d62cfc22d00608968274bf36a4e37a34746
Malware Config
Signatures
- Deletes itself 1 IoCs
- Executes dropped EXE 1 IoCs
- Suspicious behavior: EnumeratesProcesses 64 IoCs
- Suspicious behavior: RenamesItself 1 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\straf3.exe"C:\Users\Admin\AppData\Local\Temp\straf3.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\straf3.exe"C:\Users\Admin\AppData\Local\Temp\straf3.exe"2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious behavior: EnumeratesProcesses
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
straf33.exe
memory/1280-18-0x00007FF6E0B4F000-0x00007FF6E115D000-memory.dmp
memory/1280-26-0x00007FF6E0B10000-0x00007FF6E195A000-memory.dmp
memory/1280-25-0x00007FF6E0B10000-0x00007FF6E195A000-memory.dmp
memory/1280-24-0x00007FF6E0B4F000-0x00007FF6E115D000-memory.dmp
memory/1280-23-0x00007FF6E0B10000-0x00007FF6E195A000-memory.dmp
memory/1280-19-0x00007FFE69650000-0x00007FFE69652000-memory.dmp
memory/3988-8-0x00007FF7CFDCE000-0x00007FF7D03E7000-memory.dmp
memory/3988-14-0x00007FF7CFD90000-0x00007FF7D0BEE000-memory.dmp
memory/3988-16-0x00007FF7CFDCE000-0x00007FF7D03E7000-memory.dmp
memory/3988-15-0x00007FF7CFD90000-0x00007FF7D0BEE000-memory.dmp
memory/3988-2-0x00007FF7CFDCE000-0x00007FF7D03E7000-memory.dmp
memory/3988-0-0x00007FFE69650000-0x00007FFE69652000-memory.dmp
memory/3988-1-0x00007FF7CFD90000-0x00007FF7D0BEE000-memory.dmp