Analysis
- max time kernel
150s - max time network
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
- submitted
05/08/2026, 22:30
General
- Target setup_r8010.exe
- Size 61.7MB
- Sample260805-2e13caxfpd
- SHA256 35d93ba3a2eff3afed4b130abea2d89f7bfbf148e405df11922953b77fe55aee
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
- Loads dropped DLL 1 IoCs
- Suspicious behavior: EnumeratesProcesses 38 IoCs
- Suspicious behavior: LoadsDriver 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\setup_r8010.exe"C:\Users\Admin\AppData\Local\Temp\setup_r8010.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
-
C:\Users\Public\Qa2zcf\50xErW.exe"C:\Users\Public\Qa2zcf\50xErW.exe"1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
50xErW.exe
UxEnhance64.dll
adoresd.dat
msadox.tb
memory/864-1-0x00000000004E0000-0x00000000004EB000-memory.dmp
memory/864-503-0x00007FF8292D0000-0x00007FF8292E2000-memory.dmp
memory/864-504-0x0000000005D20000-0x0000000005D38000-memory.dmp
memory/864-530-0x0000000005D20000-0x0000000005D38000-memory.dmp
memory/864-531-0x00000000004D0000-0x00000000004DD000-memory.dmp
memory/864-532-0x00007FF8292D0000-0x00007FF8292E2000-memory.dmp
memory/864-0-0x00000000004D0000-0x00000000004DD000-memory.dmp
memory/3588-538-0x00007FF8151B0000-0x00007FF8156CE000-memory.dmp
memory/3588-537-0x00007FF837ED0000-0x00007FF837ED2000-memory.dmp
memory/3588-543-0x0000023C80000000-0x0000023C80891000-memory.dmp
memory/3588-545-0x00007FF837EE0000-0x00007FF837EE2000-memory.dmp
memory/3588-546-0x0000023C80000000-0x0000023C80891000-memory.dmp
memory/3588-550-0x0000023C80000000-0x0000023C80891000-memory.dmp
memory/3588-551-0x0000023C80000000-0x0000023C80891000-memory.dmp
memory/3588-552-0x0000023C80000000-0x0000023C80891000-memory.dmp
memory/3588-553-0x0000023C80000000-0x0000023C80891000-memory.dmp