Analysis
- user interaction
yes - max time kernel
148s - max time network
141s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
- submitted
30/07/2026, 20:39
General
- Target straf3.exe
- Size 8.0MB
- Sample260730-zfbsqszthx
- SHA256 c4ac9189ff546f784ea9fbe3ce633d62cfc22d00608968274bf36a4e37a34746
Malware Config
Signatures
- Deletes itself 1 IoCs
- Executes dropped EXE 1 IoCs
- Suspicious behavior: EnumeratesProcesses 64 IoCs
- Suspicious behavior: RenamesItself 1 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\straf3.exe"C:\Users\Admin\AppData\Local\Temp\straf3.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\straf3.exe"C:\Users\Admin\AppData\Local\Temp\straf3.exe"2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious behavior: EnumeratesProcesses
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
straf3.exe
memory/3052-13-0x00007FF765A0E000-0x00007FF766027000-memory.dmp
memory/3052-0-0x00007FFEC8250000-0x00007FFEC8252000-memory.dmp
memory/3052-5-0x00007FF7659D0000-0x00007FF76682E000-memory.dmp
memory/3052-10-0x00007FF765A0E000-0x00007FF766027000-memory.dmp
memory/3052-9-0x00007FF7659D0000-0x00007FF76682E000-memory.dmp
memory/3052-1-0x00007FF7659D0000-0x00007FF76682E000-memory.dmp
memory/3052-4-0x00007FF765A0E000-0x00007FF766027000-memory.dmp
memory/3052-12-0x00007FF7659D0000-0x00007FF76682E000-memory.dmp
memory/4604-16-0x00007FF7CD920000-0x00007FF7CE76A000-memory.dmp
memory/4604-15-0x00007FFEC8250000-0x00007FFEC8252000-memory.dmp
memory/4604-14-0x00007FF7CD95F000-0x00007FF7CDF6D000-memory.dmp
memory/4604-19-0x00007FF7CD920000-0x00007FF7CE76A000-memory.dmp
memory/4604-20-0x00007FF7CD95F000-0x00007FF7CDF6D000-memory.dmp
memory/4604-21-0x00007FF7CD920000-0x00007FF7CE76A000-memory.dmp
memory/4604-22-0x00007FF7CD920000-0x00007FF7CE76A000-memory.dmp