Analysis
- max time kernel
150s - max time network
115s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
01/08/2026, 16:32
General
- Target WandEnhancer.exe
- Size 1.2MB
- Sample260801-t2f2pas1gy
- SHA256 996138b055b40f972780ac028adc178d25a26f4cd473a192e07568eeb0738dde
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\WandEnhancer.exe"C:\Users\Admin\AppData\Local\Temp\WandEnhancer.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4524-0-0x00007FFD38E9F000-0x00007FFD38EA0000-memory.dmp
memory/4524-1-0x0000000000AA0000-0x0000000000BDE000-memory.dmp
memory/4524-2-0x00007FFD38D10000-0x00007FFD396B4000-memory.dmp
memory/4524-3-0x00007FFD38D10000-0x00007FFD396B4000-memory.dmp
memory/4524-4-0x00007FFD38D10000-0x00007FFD396B4000-memory.dmp
memory/4524-5-0x00007FFD38D10000-0x00007FFD396B4000-memory.dmp
memory/4524-6-0x00007FFD38D10000-0x00007FFD396B4000-memory.dmp
memory/4524-7-0x00007FFD38D10000-0x00007FFD396B4000-memory.dmp
memory/4524-8-0x00007FFD38D10000-0x00007FFD396B4000-memory.dmp
memory/4524-9-0x00007FFD38D10000-0x00007FFD396B4000-memory.dmp
memory/4524-10-0x00007FFD38D10000-0x00007FFD396B4000-memory.dmp
memory/4524-11-0x00000000038F0000-0x00000000038F8000-memory.dmp
memory/4524-12-0x0000000003990000-0x00000000039CE000-memory.dmp
memory/4524-13-0x0000000003950000-0x000000000395E000-memory.dmp
memory/4524-14-0x00007FFD38D10000-0x00007FFD396B4000-memory.dmp
memory/4524-15-0x00007FFD38D10000-0x00007FFD396B4000-memory.dmp
memory/4524-16-0x00007FFD38D10000-0x00007FFD396B4000-memory.dmp
memory/4524-17-0x00007FFD38D10000-0x00007FFD396B4000-memory.dmp
memory/4524-18-0x00007FFD38D10000-0x00007FFD396B4000-memory.dmp
memory/4524-19-0x00007FFD38D10000-0x00007FFD396B4000-memory.dmp