Analysis
- max time kernel
151s - max time network
153s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
04/08/2026, 13:28
General
- Target 430b7b1a40143e04e84378b7d14936c6ae6dedd33fac2cad461d9b98b42ca2e7.exe
- Size 93.3MB
- Sample260804-qqz4msbe97
- SHA256 430b7b1a40143e04e84378b7d14936c6ae6dedd33fac2cad461d9b98b42ca2e7
Malware Config
Signatures
- Looks up external IP address via web service 1 TTPs 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
- Maps connected drives based on registry 3 TTPs 3 IoCs
Disk information is often read in order to detect sandboxing environments.
- Checks SCSI registry key(s) 3 TTPs 4 IoCs
SCSI information is often read in order to detect sandboxing environments.
- Checks processor information in registry 2 TTPs 24 IoCs
Processor information is often read in order to detect sandboxing environments.
- Enumerates system info in registry 2 TTPs 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\430b7b1a40143e04e84378b7d14936c6ae6dedd33fac2cad461d9b98b42ca2e7.exe"C:\Users\Admin\AppData\Local\Temp\430b7b1a40143e04e84378b7d14936c6ae6dedd33fac2cad461d9b98b42ca2e7.exe"1⤵
- Maps connected drives based on registry
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3520-0-0x0000018EFE652000-0x0000018EFE653000-memory.dmp
memory/3520-1-0x0000018EFE650000-0x0000018EFE651000-memory.dmp
memory/3520-2-0x0000018EFE654000-0x0000018EFE655000-memory.dmp
memory/3520-4-0x0000018EFE655000-0x0000018EFE656000-memory.dmp
memory/3520-7-0x0000018EFE656000-0x0000018EFE658000-memory.dmp
memory/3520-6-0x0000018EFE651000-0x0000018EFE652000-memory.dmp
memory/3520-3-0x0000018EFE653000-0x0000018EFE654000-memory.dmp
memory/3520-21-0x0000018EFE658000-0x0000018EFE659000-memory.dmp
memory/3520-22-0x0000018EFE659000-0x0000018EFE65A000-memory.dmp
memory/3520-36-0x0000018EFE65A000-0x0000018EFE65B000-memory.dmp
memory/3520-38-0x0000018F3E64D000-0x0000018F3E64E000-memory.dmp
memory/3520-39-0x0000018EFE65B000-0x0000018EFE65C000-memory.dmp
memory/3520-40-0x0000018EFE652000-0x0000018EFE653000-memory.dmp
memory/3520-41-0x0000018EFE65C000-0x0000018EFE65E000-memory.dmp
memory/3520-42-0x0000018EFE655000-0x0000018EFE656000-memory.dmp
memory/3520-43-0x0000018EFE65E000-0x0000018EFE65F000-memory.dmp
memory/3520-47-0x0000018EFE661000-0x0000018EFE662000-memory.dmp
memory/3520-46-0x0000018EFE656000-0x0000018EFE658000-memory.dmp
memory/3520-45-0x0000018EFE660000-0x0000018EFE661000-memory.dmp
memory/3520-44-0x0000018EFE65F000-0x0000018EFE660000-memory.dmp
memory/3520-48-0x0000018EFE659000-0x0000018EFE65A000-memory.dmp
memory/3520-49-0x0000018EFE662000-0x0000018EFE663000-memory.dmp
memory/3520-50-0x0000018EBA000000-0x0000018EBB000000-memory.dmp
memory/3520-65-0x0000018EFE672000-0x0000018EFE673000-memory.dmp
memory/3520-64-0x0000018EFE671000-0x0000018EFE672000-memory.dmp
memory/3520-63-0x0000018EFE670000-0x0000018EFE671000-memory.dmp
memory/3520-62-0x0000018EFE66F000-0x0000018EFE670000-memory.dmp
memory/3520-61-0x0000018EFE66E000-0x0000018EFE66F000-memory.dmp
memory/3520-60-0x0000018EFE66D000-0x0000018EFE66E000-memory.dmp
memory/3520-59-0x0000018EFE66C000-0x0000018EFE66D000-memory.dmp
memory/3520-58-0x0000018EFE66A000-0x0000018EFE66B000-memory.dmp
memory/3520-57-0x0000018EFE66B000-0x0000018EFE66C000-memory.dmp
memory/3520-56-0x0000018EFE669000-0x0000018EFE66A000-memory.dmp
memory/3520-55-0x0000018EFE668000-0x0000018EFE669000-memory.dmp
memory/3520-54-0x0000018EFE665000-0x0000018EFE667000-memory.dmp
memory/3520-53-0x0000018EFE663000-0x0000018EFE665000-memory.dmp
memory/3520-52-0x0000018EFE667000-0x0000018EFE668000-memory.dmp
memory/3520-51-0x0000018EBA000000-0x0000018EBB000000-memory.dmp
memory/3520-66-0x0000018EBA000000-0x0000018EBB000000-memory.dmp
memory/3520-67-0x0000018EBA000000-0x0000018EBB000000-memory.dmp
memory/3520-68-0x0000018EBA000000-0x0000018EBB000000-memory.dmp
memory/3520-70-0x0000018EFE674000-0x0000018EFE675000-memory.dmp
memory/3520-71-0x0000018EFE675000-0x0000018EFE676000-memory.dmp
memory/3520-69-0x0000018EBA000000-0x0000018EBB000000-memory.dmp
memory/3520-73-0x0000018EFE673000-0x0000018EFE674000-memory.dmp
memory/3520-72-0x0000018EBA000000-0x0000018EBB000000-memory.dmp
memory/3520-74-0x0000018F3E64D000-0x0000018F3E64E000-memory.dmp
memory/3520-75-0x0000018EFE660000-0x0000018EFE661000-memory.dmp
memory/3520-76-0x0000018EFE662000-0x0000018EFE663000-memory.dmp
memory/3520-77-0x0000018EBA000000-0x0000018EBB000000-memory.dmp
memory/3520-78-0x0000018EBA000000-0x0000018EBB000000-memory.dmp
memory/3520-79-0x0000018EBA000000-0x0000018EBB000000-memory.dmp
memory/3520-80-0x0000018EBA000000-0x0000018EBB000000-memory.dmp
memory/3520-92-0x0000018EFE676000-0x0000018EFE678000-memory.dmp
memory/3520-93-0x0000018EBA000000-0x0000018EBB000000-memory.dmp
memory/3520-94-0x0000018EBA000000-0x0000018EBB000000-memory.dmp
memory/3520-95-0x0000018EBA000000-0x0000018EBB000000-memory.dmp
memory/3520-96-0x0000018EBA000000-0x0000018EBB000000-memory.dmp
memory/3520-97-0x0000018EBA000000-0x0000018EBB000000-memory.dmp
memory/3520-98-0x0000018EBA000000-0x0000018EBB000000-memory.dmp
memory/3520-99-0x0000018EBA000000-0x0000018EBB000000-memory.dmp
memory/3520-100-0x0000018EBA000000-0x0000018EBB000000-memory.dmp
memory/3520-101-0x0000018EBA000000-0x0000018EBB000000-memory.dmp
memory/3520-102-0x0000018EFE678000-0x0000018EFE67A000-memory.dmp