Resubmissions
05/08/2026, 10:11
260805-l72xcay1gv805/08/2026, 05:04
260805-fqmhfaaq2x804/08/2026, 21:53
260804-1rlyhsyxg1804/08/2026, 20:26
260804-y74gdsxwcz804/08/2026, 14:36
260804-ry1wkscd38304/08/2026, 14:36
260804-rysj7sgn81304/08/2026, 14:35
260804-ryencagn7t804/08/2026, 14:15
260804-rknn4ayycy804/08/2026, 14:14
260804-rj8ymssdrh304/08/2026, 13:56
260804-q8pevsgj6v8Analysis
- max time kernel
898s - max time network
897s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
04/08/2026, 14:36
General
- Target agent-windows-amd64-37628444.exe
- Size 13.1MB
- Sample260804-ry1wkscd38
- SHA256 249b8a6cd3c0bab8d929476c0f6e39cbdc940c649a3fea645bf9f8f9624c3198
Malware Config
Signatures
- Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
Processes
-
C:\Users\Admin\AppData\Local\Temp\agent-windows-amd64-37628444.exe"C:\Users\Admin\AppData\Local\Temp\agent-windows-amd64-37628444.exe"1⤵
- Checks processor information in registry
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3812-0-0x00007FF7C2520000-0x00007FF7C528F000-memory.dmp
memory/3812-3-0x00007FF7C2520000-0x00007FF7C528F000-memory.dmp
memory/3812-6-0x00007FF7C2520000-0x00007FF7C528F000-memory.dmp
memory/3812-9-0x00007FF7C2520000-0x00007FF7C528F000-memory.dmp
memory/3812-12-0x00007FF7C2520000-0x00007FF7C528F000-memory.dmp
memory/3812-15-0x00007FF7C2520000-0x00007FF7C528F000-memory.dmp
memory/3812-18-0x00007FF7C2520000-0x00007FF7C528F000-memory.dmp
memory/3812-21-0x00007FF7C2520000-0x00007FF7C528F000-memory.dmp
memory/3812-24-0x00007FF7C2520000-0x00007FF7C528F000-memory.dmp
memory/3812-25-0x00007FF7C2520000-0x00007FF7C528F000-memory.dmp
memory/3812-27-0x00007FF7C2520000-0x00007FF7C528F000-memory.dmp
memory/3812-30-0x00007FF7C2520000-0x00007FF7C528F000-memory.dmp
memory/3812-31-0x00007FF7C2520000-0x00007FF7C528F000-memory.dmp
memory/3812-33-0x00007FF7C2520000-0x00007FF7C528F000-memory.dmp
memory/3812-34-0x00007FF7C2520000-0x00007FF7C528F000-memory.dmp
memory/3812-37-0x00007FF7C2520000-0x00007FF7C528F000-memory.dmp
memory/3812-40-0x00007FF7C2520000-0x00007FF7C528F000-memory.dmp
memory/3812-43-0x00007FF7C2520000-0x00007FF7C528F000-memory.dmp
memory/3812-46-0x00007FF7C2520000-0x00007FF7C528F000-memory.dmp
memory/3812-49-0x00007FF7C2520000-0x00007FF7C528F000-memory.dmp
memory/3812-52-0x00007FF7C2520000-0x00007FF7C528F000-memory.dmp
memory/3812-55-0x00007FF7C2520000-0x00007FF7C528F000-memory.dmp
memory/3812-58-0x00007FF7C2520000-0x00007FF7C528F000-memory.dmp
memory/3812-61-0x00007FF7C2520000-0x00007FF7C528F000-memory.dmp
memory/3812-62-0x00007FF7C2520000-0x00007FF7C528F000-memory.dmp
memory/3812-64-0x00007FF7C2520000-0x00007FF7C528F000-memory.dmp
memory/3812-67-0x00007FF7C2520000-0x00007FF7C528F000-memory.dmp
memory/3812-68-0x00007FF7C2520000-0x00007FF7C528F000-memory.dmp
memory/3812-70-0x00007FF7C2520000-0x00007FF7C528F000-memory.dmp
memory/3812-73-0x00007FF7C2520000-0x00007FF7C528F000-memory.dmp
memory/3812-76-0x00007FF7C2520000-0x00007FF7C528F000-memory.dmp
memory/3812-77-0x00007FF7C2520000-0x00007FF7C528F000-memory.dmp
memory/3812-79-0x00007FF7C2520000-0x00007FF7C528F000-memory.dmp
memory/3812-80-0x00007FF7C2520000-0x00007FF7C528F000-memory.dmp
memory/3812-82-0x00007FF7C2520000-0x00007FF7C528F000-memory.dmp
memory/3812-83-0x00007FF7C2520000-0x00007FF7C528F000-memory.dmp
memory/3812-86-0x00007FF7C2520000-0x00007FF7C528F000-memory.dmp
memory/3812-87-0x00007FF7C2520000-0x00007FF7C528F000-memory.dmp