Analysis
- max time kernel
150s - max time network
162s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
04/08/2026, 06:11
General
- Target Microsoft.OutlookForWindows_x64.appx
- Size 32.2MB
- Sample260804-gx2flssfkf
- SHA256 5bf7ae271645d36452c300d4eafe5f5c22a955915949857e468f424b003c24f8
Score
1/10
Malware Config
Signatures
- Modifies registry class 4 IoCs
- Suspicious behavior: EnumeratesProcesses 7 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\WindowsPowerShell\v1.0\PowerShell.exepowershell start shell:AppsFolder\Microsoft.OutlookForWindows_8wekyb3d8bbwe!Microsoft.OutlookforWindows1⤵
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Program Files\WindowsApps\Microsoft.OutlookForWindows_1.2026.730.100_x64__8wekyb3d8bbwe\olk.exe"C:\Program Files\WindowsApps\Microsoft.OutlookForWindows_1.2026.730.100_x64__8wekyb3d8bbwe\olk.exe"1⤵
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1988-0-0x00007FF92979F000-0x00007FF9297A0000-memory.dmp
memory/1988-4-0x00007FF929610000-0x00007FF929FB4000-memory.dmp
memory/1988-3-0x0000020E75EA0000-0x0000020E75EC2000-memory.dmp
memory/1988-5-0x00007FF929610000-0x00007FF929FB4000-memory.dmp
memory/1988-6-0x00007FF929610000-0x00007FF929FB4000-memory.dmp
memory/1988-7-0x00007FF929610000-0x00007FF929FB4000-memory.dmp
memory/1988-8-0x00007FF929610000-0x00007FF929FB4000-memory.dmp
memory/1988-9-0x00007FF929610000-0x00007FF929FB4000-memory.dmp
memory/1988-11-0x00007FF929610000-0x00007FF929FB4000-memory.dmp