Analysis
- max time kernel
149s - max time network
154s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
31/07/2026, 10:59
General
- Target Walftech Fix.exe
- Size 63.0MB
- Sample260731-m3hhkshb36
- SHA256 01beef74a6aeca4b89e8cdea47bcf38afe162471aaa418bc092922a64b3976b5
Malware Config
Signatures
- Loads dropped DLL 3 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
- Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
Processes
-
C:\Users\Admin\AppData\Local\Temp\Walftech Fix.exe"C:\Users\Admin\AppData\Local\Temp\Walftech Fix.exe"1⤵
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\SYSTEM32\schtasks.exe"schtasks" /Query /TN "WalftechFix"2⤵
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
D3DCompiler_47_cor3.dll
PresentationNative_cor3.dll
wpfgfx_cor3.dll
memory/4912-5-0x0000022DB8970000-0x0000022DB9600000-memory.dmp
memory/4912-17-0x0000022DBAC40000-0x0000022DBADA0000-memory.dmp
memory/4912-25-0x0000022DB7C00000-0x0000022DB7C40000-memory.dmp
memory/4912-21-0x0000022DB75B0000-0x0000022DB7600000-memory.dmp
memory/4912-29-0x0000022D81790000-0x0000022D81FC0000-memory.dmp
memory/4912-53-0x0000022DBB040000-0x0000022DBB060000-memory.dmp
memory/4912-69-0x0000022DBB150000-0x0000022DBB170000-memory.dmp
memory/4912-65-0x0000022DBB1A0000-0x0000022DBB1D0000-memory.dmp
memory/4912-77-0x0000022DBB380000-0x0000022DBB490000-memory.dmp
memory/4912-80-0x0000022DBB1F0000-0x0000022DBB240000-memory.dmp
memory/4912-84-0x0000022D84890000-0x0000022D85030000-memory.dmp
memory/4912-100-0x0000022D85430000-0x0000022D854F0000-memory.dmp
memory/4912-116-0x0000022D85590000-0x0000022D855B0000-memory.dmp
memory/4912-112-0x0000022D85540000-0x0000022D85590000-memory.dmp
memory/4912-120-0x0000022D86230000-0x0000022D863A0000-memory.dmp
memory/4912-124-0x0000022D866E0000-0x0000022D86730000-memory.dmp
memory/4912-141-0x0000022D86020000-0x0000022D86030000-memory.dmp
memory/4912-137-0x0000022D86730000-0x0000022D86770000-memory.dmp
memory/4912-145-0x0000022D86910000-0x0000022D86980000-memory.dmp
memory/4912-153-0x0000022D86990000-0x0000022D869A0000-memory.dmp
memory/4912-149-0x0000022D86B80000-0x0000022D86CE0000-memory.dmp
memory/4912-133-0x0000022D867D0000-0x0000022D86830000-memory.dmp
memory/4912-108-0x0000022D83DF0000-0x0000022D83E00000-memory.dmp
memory/4912-104-0x0000022D83FB0000-0x0000022D83FD0000-memory.dmp
memory/4912-157-0x0000022D86870000-0x0000022D86880000-memory.dmp
memory/4912-96-0x0000022D83F80000-0x0000022D83FB0000-memory.dmp
memory/4912-92-0x0000022D83EC0000-0x0000022D83F50000-memory.dmp
memory/4912-88-0x0000022D83D70000-0x0000022D83DA0000-memory.dmp
memory/4912-61-0x0000022DBB080000-0x0000022DBB0A0000-memory.dmp
memory/4912-57-0x0000022DBB0F0000-0x0000022DBB130000-memory.dmp
memory/4912-49-0x0000022DB9CB0000-0x0000022DB9CD0000-memory.dmp
memory/4912-45-0x0000022DB9BD0000-0x0000022DB9BF0000-memory.dmp
memory/4912-41-0x0000022DB7CB0000-0x0000022DB7CC0000-memory.dmp
memory/4912-37-0x0000022DB7620000-0x0000022DB7640000-memory.dmp
memory/4912-33-0x0000022DBADA0000-0x0000022DBAE20000-memory.dmp
memory/4912-13-0x0000022DB9830000-0x0000022DB9A60000-memory.dmp
memory/4912-9-0x0000022D80000000-0x0000022D80F60000-memory.dmp
memory/4912-161-0x0000022D8ABF0000-0x0000022D8AC10000-memory.dmp
memory/4912-178-0x0000022D8DC00000-0x0000022D8DCB0000-memory.dmp
memory/4912-173-0x0000022D8DA90000-0x0000022D8DB00000-memory.dmp
memory/4912-181-0x0000022D8DFA0000-0x0000022D8E1A0000-memory.dmp
memory/4912-165-0x0000022D8D8E0000-0x0000022D8DA90000-memory.dmp
memory/4912-169-0x0000022D8C480000-0x0000022D8C4A0000-memory.dmp
memory/4912-189-0x0000022D8DB00000-0x0000022D8DB20000-memory.dmp
memory/4912-185-0x0000022D8E1A0000-0x0000022D8E230000-memory.dmp
memory/4912-193-0x0000022D8E230000-0x0000022D8E260000-memory.dmp
memory/4912-197-0x0000022D8E260000-0x0000022D8E280000-memory.dmp
memory/4912-201-0x0000022D8E280000-0x0000022D8E2B0000-memory.dmp
memory/4912-205-0x0000022D8E430000-0x0000022D8E450000-memory.dmp