Analysis
- max time kernel
299s - max time network
280s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
02/08/2026, 13:24
General
- Target app.exe
- Size 93.3MB
- Sample260802-qnepxstdqc
- SHA256 40130f46a64522de4fd9a339f1b6b6656dce39b709a807cbeac4c9562ce3d9de
Malware Config
Signatures
- Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
- Looks up external IP address via web service 1 TTPs 2 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
- Maps connected drives based on registry 3 TTPs 3 IoCs
Disk information is often read in order to detect sandboxing environments.
- Checks SCSI registry key(s) 3 TTPs 4 IoCs
SCSI information is often read in order to detect sandboxing environments.
- Checks processor information in registry 2 TTPs 24 IoCs
Processor information is often read in order to detect sandboxing environments.
- Enumerates system info in registry 2 TTPs 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\app.exe"C:\Users\Admin\AppData\Local\Temp\app.exe"1⤵
- Checks computer location settings
- Maps connected drives based on registry
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3504-1-0x000001967D9E0000-0x000001967D9E1000-memory.dmp
memory/3504-0-0x000001967D9E2000-0x000001967D9E3000-memory.dmp
memory/3504-3-0x000001967D9E3000-0x000001967D9E4000-memory.dmp
memory/3504-6-0x000001967D9E6000-0x000001967D9E7000-memory.dmp
memory/3504-5-0x000001967D9E7000-0x000001967D9E8000-memory.dmp
memory/3504-4-0x000001967D9E5000-0x000001967D9E6000-memory.dmp
memory/3504-2-0x000001967D9E4000-0x000001967D9E5000-memory.dmp
memory/3504-36-0x000001967D9EA000-0x000001967D9EC000-memory.dmp
memory/3504-40-0x000001967D9EE000-0x000001967D9EF000-memory.dmp
memory/3504-39-0x000001967D9ED000-0x000001967D9EE000-memory.dmp
memory/3504-38-0x000001967D9E1000-0x000001967D9E2000-memory.dmp
memory/3504-37-0x000001967D9EC000-0x000001967D9ED000-memory.dmp
memory/3504-35-0x000001967D9E8000-0x000001967D9EA000-memory.dmp
memory/3504-42-0x000001967D9EF000-0x000001967D9F1000-memory.dmp
memory/3504-41-0x000001967D9F1000-0x000001967D9F2000-memory.dmp
memory/3504-44-0x00000196BDA00000-0x00000196BDC00000-memory.dmp
memory/3504-43-0x00000196BDA00000-0x00000196BDC00000-memory.dmp
memory/3504-47-0x0000019637E00000-0x0000019638000000-memory.dmp
memory/3504-48-0x0000019637E00000-0x0000019638000000-memory.dmp
memory/3504-60-0x000001967D9FF000-0x000001967DA00000-memory.dmp
memory/3504-59-0x000001967D9FE000-0x000001967D9FF000-memory.dmp
memory/3504-58-0x000001967DA01000-0x000001967DA02000-memory.dmp
memory/3504-61-0x00000196C3000000-0x00000196C3200000-memory.dmp
memory/3504-69-0x000001967DA00000-0x000001967DA01000-memory.dmp
memory/3504-71-0x000001967DA02000-0x000001967DA04000-memory.dmp
memory/3504-70-0x0000019637E00000-0x0000019638000000-memory.dmp
memory/3504-68-0x000001967D9F5000-0x000001967D9F6000-memory.dmp
memory/3504-67-0x000001967D9F4000-0x000001967D9F5000-memory.dmp
memory/3504-66-0x00000196BDA00000-0x00000196BDC00000-memory.dmp
memory/3504-65-0x000001967DA06000-0x000001967DA07000-memory.dmp
memory/3504-64-0x000001967DA04000-0x000001967DA06000-memory.dmp
memory/3504-63-0x00000196BDA00000-0x00000196BDC00000-memory.dmp
memory/3504-62-0x00000196BDA00000-0x00000196BDC00000-memory.dmp
memory/3504-57-0x000001967D9FD000-0x000001967D9FE000-memory.dmp
memory/3504-56-0x000001967D9FC000-0x000001967D9FD000-memory.dmp
memory/3504-55-0x000001967D9FB000-0x000001967D9FC000-memory.dmp
memory/3504-54-0x000001967D9FA000-0x000001967D9FB000-memory.dmp
memory/3504-53-0x000001967D9F6000-0x000001967D9F8000-memory.dmp
memory/3504-52-0x000001967D9F9000-0x000001967D9FA000-memory.dmp
memory/3504-51-0x000001967D9F8000-0x000001967D9F9000-memory.dmp
memory/3504-50-0x00000196C3000000-0x00000196C3200000-memory.dmp
memory/3504-49-0x00000196C3000000-0x00000196C3200000-memory.dmp
memory/3504-46-0x000001967D9F2000-0x000001967D9F3000-memory.dmp
memory/3504-45-0x0000019637E00000-0x0000019638000000-memory.dmp
memory/3504-72-0x000001967D9E2000-0x000001967D9E3000-memory.dmp
memory/3504-86-0x00000196C3000000-0x00000196C3200000-memory.dmp
memory/3504-85-0x000001967DA08000-0x000001967DA0A000-memory.dmp
memory/3504-89-0x00000196C3000000-0x00000196C3200000-memory.dmp
memory/3504-95-0x000001967D9E6000-0x000001967D9E7000-memory.dmp
memory/3504-94-0x000001967D9E7000-0x000001967D9E8000-memory.dmp
memory/3504-93-0x000001967D9E5000-0x000001967D9E6000-memory.dmp
memory/3504-92-0x00000196C3000000-0x00000196C3200000-memory.dmp
memory/3504-91-0x00000196C3000000-0x00000196C3200000-memory.dmp
memory/3504-90-0x00000196C3000000-0x00000196C3200000-memory.dmp
memory/3504-88-0x00000196C3000000-0x00000196C3200000-memory.dmp
memory/3504-87-0x00000196C3000000-0x00000196C3200000-memory.dmp
memory/3504-84-0x000001967DA07000-0x000001967DA08000-memory.dmp
memory/3504-96-0x0000019637E00000-0x0000019638000000-memory.dmp
memory/3504-100-0x00000196C3000000-0x00000196C3200000-memory.dmp
memory/3504-99-0x000001967D9EE000-0x000001967D9EF000-memory.dmp
memory/3504-98-0x00000196C3000000-0x00000196C3200000-memory.dmp
memory/3504-97-0x00000196C3000000-0x00000196C3200000-memory.dmp
memory/3504-101-0x00000196BDA00000-0x00000196BDC00000-memory.dmp
memory/3504-103-0x0000019637E00000-0x0000019638000000-memory.dmp
memory/3504-105-0x00000196C3000000-0x00000196C3200000-memory.dmp
memory/3504-104-0x0000019637E00000-0x0000019638000000-memory.dmp
memory/3504-102-0x00000196BDA00000-0x00000196BDC00000-memory.dmp
memory/3504-107-0x000001967DA01000-0x000001967DA02000-memory.dmp
memory/3504-106-0x000001967D9FA000-0x000001967D9FB000-memory.dmp
memory/3504-108-0x00000196BDA00000-0x00000196BDC00000-memory.dmp
memory/3504-110-0x000001967DA00000-0x000001967DA01000-memory.dmp
memory/3504-109-0x000001967D9F4000-0x000001967D9F5000-memory.dmp
memory/3504-112-0x000001967DA0A000-0x000001967DA0B000-memory.dmp
memory/3504-111-0x000001967DA02000-0x000001967DA04000-memory.dmp
memory/3504-113-0x000001967DA08000-0x000001967DA0A000-memory.dmp
memory/3504-114-0x00000196C3000000-0x00000196C3200000-memory.dmp
memory/3504-115-0x00000196C3000000-0x00000196C3200000-memory.dmp
memory/3504-116-0x00000196C3000000-0x00000196C3200000-memory.dmp
memory/3504-117-0x00000196C3000000-0x00000196C3200000-memory.dmp
memory/3504-118-0x0000019637E00000-0x0000019638000000-memory.dmp
memory/3504-119-0x00000196C3000000-0x00000196C3200000-memory.dmp
memory/3504-120-0x00000196C3000000-0x00000196C3200000-memory.dmp
memory/3504-121-0x00000196C3000000-0x00000196C3200000-memory.dmp
memory/3504-122-0x000001967DA0B000-0x000001967DA0C000-memory.dmp