Analysis
- max time kernel
150s - max time network
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
01/08/2026, 17:51
General
- Target LicenseManager.exe
- Size 2.0MB
- Sample260801-we464sej41
- SHA256 ba8eb0634d4b7476e93c1da8ee923adbcc98f28e269b4cc1f43dac1ebe1fcdbb
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\LicenseManager.exe"C:\Users\Admin\AppData\Local\Temp\LicenseManager.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1564-0-0x00007FFF27A3F000-0x00007FFF27A40000-memory.dmp
memory/1564-1-0x000001C8911F0000-0x000001C8913F8000-memory.dmp
memory/1564-3-0x000001C8918D0000-0x000001C8918F0000-memory.dmp
memory/1564-2-0x000001C8ABAA0000-0x000001C8ABC7E000-memory.dmp
memory/1564-7-0x000001C891920000-0x000001C89193A000-memory.dmp
memory/1564-9-0x000001C8918F0000-0x000001C8918F8000-memory.dmp
memory/1564-8-0x000001C8932B0000-0x000001C8932DE000-memory.dmp
memory/1564-16-0x00007FFF278B0000-0x00007FFF28254000-memory.dmp
memory/1564-11-0x000001C8932E0000-0x000001C8933A2000-memory.dmp
memory/1564-10-0x00007FFF278B0000-0x00007FFF28254000-memory.dmp
memory/1564-6-0x000001C893280000-0x000001C8932AA000-memory.dmp
memory/1564-5-0x00007FFF278B0000-0x00007FFF28254000-memory.dmp
memory/1564-4-0x000001C893240000-0x000001C893284000-memory.dmp
memory/1564-15-0x000001C891900000-0x000001C89190A000-memory.dmp
memory/1564-17-0x00007FFF278B0000-0x00007FFF28254000-memory.dmp
memory/1564-14-0x000001C891850000-0x000001C891860000-memory.dmp
memory/1564-13-0x000001C893220000-0x000001C89322A000-memory.dmp
memory/1564-12-0x000001C8ABC80000-0x000001C8ABCA8000-memory.dmp
memory/1564-18-0x00007FFF278B0000-0x00007FFF28254000-memory.dmp
memory/1564-20-0x00007FFF278B0000-0x00007FFF28254000-memory.dmp
memory/1564-21-0x00007FFF278B0000-0x00007FFF28254000-memory.dmp
memory/1564-22-0x00007FFF278B0000-0x00007FFF28254000-memory.dmp
memory/1564-24-0x00007FFF278B0000-0x00007FFF28254000-memory.dmp
memory/1564-25-0x00007FFF278B0000-0x00007FFF28254000-memory.dmp
memory/1564-23-0x00007FFF278B0000-0x00007FFF28254000-memory.dmp
memory/1564-19-0x000001C8ABDC0000-0x000001C8ABDF2000-memory.dmp
memory/1564-26-0x00007FFF278B0000-0x00007FFF28254000-memory.dmp