Analysis
- max time kernel
148s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
31/07/2026, 18:12
General
- Target da6e1ea8e301c6a64110c72f8e406251160ce1fec379038abb0a57d79a2064a3.exe
- Size 306KB
- Sample260731-wtak2sdn4x
- SHA256 da6e1ea8e301c6a64110c72f8e406251160ce1fec379038abb0a57d79a2064a3
Malware Config
Signatures
- Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
- Suspicious use of AdjustPrivilegeToken 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\da6e1ea8e301c6a64110c72f8e406251160ce1fec379038abb0a57d79a2064a3.exe"C:\Users\Admin\AppData\Local\Temp\da6e1ea8e301c6a64110c72f8e406251160ce1fec379038abb0a57d79a2064a3.exe"1⤵
- Enumerates connected drives
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
WMSDKNS.XML
memory/2864-0-0x0000000000510000-0x0000000000564000-memory.dmp
memory/2864-1-0x000000001C040000-0x000000001C050000-memory.dmp
memory/2864-11-0x000000001C040000-0x000000001C050000-memory.dmp
memory/2864-12-0x000000001C040000-0x000000001C050000-memory.dmp
memory/2864-13-0x0000000023600000-0x0000000023608000-memory.dmp
memory/2864-15-0x0000000020880000-0x000000002088E000-memory.dmp
memory/2864-14-0x00000000208B0000-0x00000000208E8000-memory.dmp
memory/2864-16-0x000000001C040000-0x000000001C050000-memory.dmp
memory/2864-17-0x000000001C550000-0x000000001C67D000-memory.dmp
memory/2864-18-0x000000001C040000-0x000000001C050000-memory.dmp
memory/2864-19-0x000000001C040000-0x000000001C050000-memory.dmp