Analysis
- max time kernel
299s - max time network
227s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
- submitted
02/08/2026, 13:24
General
- Target app.exe
- Size 93.3MB
- Sample260802-qnepxstdqc
- SHA256 40130f46a64522de4fd9a339f1b6b6656dce39b709a807cbeac4c9562ce3d9de
Malware Config
Signatures
- Looks up external IP address via web service 1 TTPs 2 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
- Maps connected drives based on registry 3 TTPs 3 IoCs
Disk information is often read in order to detect sandboxing environments.
- Checks SCSI registry key(s) 3 TTPs 4 IoCs
SCSI information is often read in order to detect sandboxing environments.
- Checks processor information in registry 2 TTPs 24 IoCs
Processor information is often read in order to detect sandboxing environments.
- Enumerates system info in registry 2 TTPs 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\app.exe"C:\Users\Admin\AppData\Local\Temp\app.exe"1⤵
- Maps connected drives based on registry
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4224-1-0x0000020D7D530000-0x0000020D7D531000-memory.dmp
memory/4224-0-0x0000020D7D532000-0x0000020D7D533000-memory.dmp
memory/4224-3-0x0000020D7D533000-0x0000020D7D534000-memory.dmp
memory/4224-5-0x0000020D7D531000-0x0000020D7D532000-memory.dmp
memory/4224-4-0x0000020D7D535000-0x0000020D7D536000-memory.dmp
memory/4224-2-0x0000020D7D534000-0x0000020D7D535000-memory.dmp
memory/4224-16-0x0000020D7D537000-0x0000020D7D538000-memory.dmp
memory/4224-18-0x0000020D7D538000-0x0000020D7D53A000-memory.dmp
memory/4224-17-0x0000020D7D536000-0x0000020D7D537000-memory.dmp
memory/4224-39-0x0000020D7D53D000-0x0000020D7D53E000-memory.dmp
memory/4224-38-0x0000020D7D53C000-0x0000020D7D53D000-memory.dmp
memory/4224-42-0x0000020D7D540000-0x0000020D7D541000-memory.dmp
memory/4224-41-0x0000020D7D53E000-0x0000020D7D540000-memory.dmp
memory/4224-40-0x0000020D7D532000-0x0000020D7D533000-memory.dmp
memory/4224-37-0x0000020D7D53A000-0x0000020D7D53C000-memory.dmp
memory/4224-44-0x0000020D7D542000-0x0000020D7D543000-memory.dmp
memory/4224-43-0x0000020D7D541000-0x0000020D7D542000-memory.dmp
memory/4224-47-0x0000020D6F800000-0x0000020D6FA00000-memory.dmp
memory/4224-48-0x0000020D6F800000-0x0000020D6FA00000-memory.dmp
memory/4224-46-0x0000020DBD600000-0x0000020DBD800000-memory.dmp
memory/4224-45-0x0000020D6F800000-0x0000020D6FA00000-memory.dmp
memory/4224-49-0x0000020D6F800000-0x0000020D6FA00000-memory.dmp
memory/4224-64-0x0000020D6F800000-0x0000020D6FA00000-memory.dmp
memory/4224-71-0x0000020D7D556000-0x0000020D7D557000-memory.dmp
memory/4224-70-0x0000020D6F800000-0x0000020D6FA00000-memory.dmp
memory/4224-69-0x0000020D7D547000-0x0000020D7D549000-memory.dmp
memory/4224-68-0x0000020DBD600000-0x0000020DBD800000-memory.dmp
memory/4224-67-0x0000020D7D557000-0x0000020D7D558000-memory.dmp
memory/4224-66-0x0000020DBD600000-0x0000020DBD800000-memory.dmp
memory/4224-65-0x0000020DBD600000-0x0000020DBD800000-memory.dmp
memory/4224-63-0x0000020D7D551000-0x0000020D7D552000-memory.dmp
memory/4224-62-0x0000020D7D550000-0x0000020D7D551000-memory.dmp
memory/4224-61-0x0000020D7D54F000-0x0000020D7D550000-memory.dmp
memory/4224-60-0x0000020D7D54E000-0x0000020D7D54F000-memory.dmp
memory/4224-84-0x0000020D7D538000-0x0000020D7D53A000-memory.dmp
memory/4224-89-0x0000020DBDE00000-0x0000020DBE000000-memory.dmp
memory/4224-93-0x0000020DBDE00000-0x0000020DBE000000-memory.dmp
memory/4224-96-0x0000020DBDC00000-0x0000020DBDE00000-memory.dmp
memory/4224-95-0x0000020DBDE00000-0x0000020DBE000000-memory.dmp
memory/4224-94-0x0000020DBDE00000-0x0000020DBE000000-memory.dmp
memory/4224-92-0x0000020D7D554000-0x0000020D7D556000-memory.dmp
memory/4224-91-0x0000020DBDE00000-0x0000020DBE000000-memory.dmp
memory/4224-90-0x0000020DBDE00000-0x0000020DBE000000-memory.dmp
memory/4224-88-0x0000020DBDE00000-0x0000020DBE000000-memory.dmp
memory/4224-87-0x0000020DBDE00000-0x0000020DBE000000-memory.dmp
memory/4224-86-0x0000020DBDC00000-0x0000020DBDE00000-memory.dmp
memory/4224-85-0x0000020DBDC00000-0x0000020DBDE00000-memory.dmp
memory/4224-83-0x0000020D7D537000-0x0000020D7D538000-memory.dmp
memory/4224-59-0x0000020D7D54D000-0x0000020D7D54E000-memory.dmp
memory/4224-58-0x0000020D7D54C000-0x0000020D7D54D000-memory.dmp
memory/4224-57-0x0000020D7D54B000-0x0000020D7D54C000-memory.dmp
memory/4224-56-0x0000020D7D546000-0x0000020D7D547000-memory.dmp
memory/4224-55-0x0000020D7D54A000-0x0000020D7D54B000-memory.dmp
memory/4224-54-0x0000020D7D549000-0x0000020D7D54A000-memory.dmp
memory/4224-53-0x0000020D7D545000-0x0000020D7D546000-memory.dmp
memory/4224-52-0x0000020D7D544000-0x0000020D7D545000-memory.dmp
memory/4224-51-0x0000020D6F800000-0x0000020D6FA00000-memory.dmp
memory/4224-50-0x0000020D6F800000-0x0000020D6FA00000-memory.dmp
memory/4224-97-0x0000020D7D53D000-0x0000020D7D53E000-memory.dmp
memory/4224-98-0x0000020D7D558000-0x0000020D7D55A000-memory.dmp