Analysis
- user interaction
yes - max time kernel
148s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
03/08/2026, 18:14
General
- Target Uqxrm.exe
- Size 321KB
- Sample260803-wvf48ade63
- SHA256 8e388c776123a337024d403881c6f6991efd7edfe687f099f37702710f00936a
Malware Config
Signatures
- Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Uqxrm.exe"C:\Users\Admin\AppData\Local\Temp\Uqxrm.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
Tmp3DEE.tmp
memory/4452-0-0x0000000000060000-0x00000000000B4000-memory.dmp
memory/4452-1-0x0000000004AD0000-0x0000000004AE0000-memory.dmp
memory/4452-2-0x00000000024A0000-0x00000000024B8000-memory.dmp
memory/4452-3-0x0000000004A30000-0x0000000004A7C000-memory.dmp
memory/4452-16-0x0000000004DA0000-0x0000000004E06000-memory.dmp
memory/4452-17-0x00000000059D0000-0x0000000005A62000-memory.dmp
memory/4452-18-0x0000000006020000-0x00000000065C4000-memory.dmp
memory/4452-19-0x0000000004AD0000-0x0000000004AE0000-memory.dmp
memory/4452-20-0x00000000066D0000-0x00000000067A6000-memory.dmp
memory/4452-21-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-32-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-86-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-132-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-136-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-146-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-144-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-142-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-140-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-138-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-134-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-130-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-128-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-126-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-124-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-122-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-120-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-118-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-116-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-114-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-112-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-110-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-108-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-106-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-104-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-102-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-100-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-98-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-96-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-94-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-92-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-90-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-88-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-84-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-82-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-80-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-78-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-77-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-74-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-73-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-70-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-68-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-66-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-64-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-60-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-58-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-56-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-62-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-54-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-52-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-50-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-48-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-44-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-42-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-40-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-38-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-36-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-34-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-30-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-28-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-26-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-24-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-22-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-46-0x00000000066D0000-0x00000000067A1000-memory.dmp
memory/4452-3169-0x0000000004AD0000-0x0000000004AE0000-memory.dmp
memory/4452-3170-0x0000000004AD0000-0x0000000004AE0000-memory.dmp