Analysis
- max time kernel
150s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
05/08/2026, 00:17
General
- Target inst_smt008.exe
- Size 55.2MB
- Sample260805-alezxa1wex
- SHA256 4037eb927f534df435b4c315a8542dda5b00c28cd9ff0aa3f0cea8a37349dcfc
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
- Loads dropped DLL 1 IoCs
- Suspicious behavior: EnumeratesProcesses 38 IoCs
- Suspicious behavior: LoadsDriver 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\inst_smt008.exe"C:\Users\Admin\AppData\Local\Temp\inst_smt008.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
-
C:\Users\Public\taLxIv\6ArxAW.exeC:\Users\Public\taLxIv\6ArxAW.exe1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
6ArxAW.exe
UxEnhance64.dll
adoresd.dat
msadox.tb
memory/1864-1-0x00000000001E0000-0x00000000001ED000-memory.dmp
memory/1864-2-0x00000000001F0000-0x00000000001FB000-memory.dmp
memory/1864-504-0x00007FFE8C860000-0x00007FFE8C870000-memory.dmp
memory/1864-514-0x00007FFE8C860000-0x00007FFE8C870000-memory.dmp
memory/1864-525-0x00000000001E0000-0x00000000001ED000-memory.dmp
memory/1864-526-0x00007FFE8C860000-0x00007FFE8C870000-memory.dmp
memory/1864-0-0x00000000001E0000-0x00000000001ED000-memory.dmp
memory/2412-531-0x00007FFE9A730000-0x00007FFE9A732000-memory.dmp
memory/2412-532-0x00007FFE7CF30000-0x00007FFE7D44E000-memory.dmp
memory/2412-538-0x000001C72C8F0000-0x000001C72D181000-memory.dmp
memory/2412-539-0x00007FFE9A740000-0x00007FFE9A742000-memory.dmp
memory/2412-540-0x000001C72C8F0000-0x000001C72D181000-memory.dmp
memory/2412-544-0x000001C72C8F0000-0x000001C72D181000-memory.dmp
memory/2412-546-0x000001C72C8F0000-0x000001C72D181000-memory.dmp
memory/2412-545-0x000001C72C8F0000-0x000001C72D181000-memory.dmp
memory/2412-547-0x000001C72C8F0000-0x000001C72D181000-memory.dmp