Analysis
- max time kernel
151s - max time network
137s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
04/08/2026, 23:25
General
- Target inst_smt008.exe
- Size 55.2MB
- Sample260804-3efxvafq7w
- SHA256 5381fa32fe4833802117fa4710ca73630764505695602075cb456b6149b3ab30
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
- Loads dropped DLL 1 IoCs
- Suspicious behavior: EnumeratesProcesses 38 IoCs
- Suspicious behavior: LoadsDriver 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\inst_smt008.exe"C:\Users\Admin\AppData\Local\Temp\inst_smt008.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
-
C:\Users\Public\wj7k3a\4jwrsY.exe"C:\Users\Public\wj7k3a\4jwrsY.exe"1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
4jwrsY.exe
UxEnhance64.dll
adoresd.dat
msadox.tb
memory/2640-526-0x00007FFD306E0000-0x00007FFD306F2000-memory.dmp
memory/2640-1-0x00000000004E0000-0x00000000004EB000-memory.dmp
memory/2640-525-0x00000000004D0000-0x00000000004DD000-memory.dmp
memory/2640-0-0x00000000004D0000-0x00000000004DD000-memory.dmp
memory/2640-503-0x00007FFD306E0000-0x00007FFD306F2000-memory.dmp
memory/5732-537-0x0000020CA05F0000-0x0000020CA0E81000-memory.dmp
memory/5732-532-0x00007FFD1DB90000-0x00007FFD1E0AE000-memory.dmp
memory/5732-531-0x00007FFD40630000-0x00007FFD40632000-memory.dmp
memory/5732-539-0x00007FFD40640000-0x00007FFD40642000-memory.dmp
memory/5732-540-0x0000020CA05F0000-0x0000020CA0E81000-memory.dmp
memory/5732-544-0x0000020CA05F0000-0x0000020CA0E81000-memory.dmp
memory/5732-545-0x0000020CA05F0000-0x0000020CA0E81000-memory.dmp
memory/5732-546-0x0000020CA05F0000-0x0000020CA0E81000-memory.dmp
memory/5732-547-0x0000020CA05F0000-0x0000020CA0E81000-memory.dmp