Analysis
- max time kernel
150s - max time network
147s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
05/08/2026, 01:53
General
- Target a2328368a38b8239d1e6f259f7812ae04198a0951da4aa10c2aa15edce1567c9.exe
- Size 12.4MB
- Sample260805-ca4j8swbrc
- SHA256 a2328368a38b8239d1e6f259f7812ae04198a0951da4aa10c2aa15edce1567c9
Malware Config
Signatures
- VMProtect packed file 64 IoCs
Detects executables packed with VMProtect commercial packer.
- Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
- UPX packed file 23 IoCs
Detects executables packed with UPX/modified UPX open source packer.
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious behavior: EnumeratesProcesses 4 IoCs
- Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a2328368a38b8239d1e6f259f7812ae04198a0951da4aa10c2aa15edce1567c9.exe"C:\Users\Admin\AppData\Local\Temp\a2328368a38b8239d1e6f259f7812ae04198a0951da4aa10c2aa15edce1567c9.exe"1⤵
- Writes to the Master Boot Record (MBR)
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2260-2-0x00000000021A0000-0x00000000021A1000-memory.dmp
memory/2260-6-0x0000000002500000-0x0000000002501000-memory.dmp
memory/2260-5-0x00000000021F0000-0x00000000021F1000-memory.dmp
memory/2260-3-0x00000000021B0000-0x00000000021B1000-memory.dmp
memory/2260-1-0x0000000000D2B000-0x000000000137F000-memory.dmp
memory/2260-4-0x00000000021E0000-0x00000000021E1000-memory.dmp
memory/2260-0-0x0000000002180000-0x0000000002181000-memory.dmp
memory/2260-7-0x0000000002510000-0x0000000002511000-memory.dmp
memory/2260-11-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-26-0x0000000010000000-0x000000001003E000-memory.dmp
memory/2260-30-0x0000000010000000-0x000000001003E000-memory.dmp
memory/2260-48-0x0000000010000000-0x000000001003E000-memory.dmp
memory/2260-54-0x0000000010000000-0x000000001003E000-memory.dmp
memory/2260-52-0x0000000010000000-0x000000001003E000-memory.dmp
memory/2260-50-0x0000000010000000-0x000000001003E000-memory.dmp
memory/2260-46-0x0000000010000000-0x000000001003E000-memory.dmp
memory/2260-44-0x0000000010000000-0x000000001003E000-memory.dmp
memory/2260-42-0x0000000010000000-0x000000001003E000-memory.dmp
memory/2260-40-0x0000000010000000-0x000000001003E000-memory.dmp
memory/2260-55-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-36-0x0000000010000000-0x000000001003E000-memory.dmp
memory/2260-34-0x0000000010000000-0x000000001003E000-memory.dmp
memory/2260-33-0x0000000010000000-0x000000001003E000-memory.dmp
memory/2260-28-0x0000000010000000-0x000000001003E000-memory.dmp
memory/2260-24-0x0000000010000000-0x000000001003E000-memory.dmp
memory/2260-22-0x0000000010000000-0x000000001003E000-memory.dmp
memory/2260-20-0x0000000010000000-0x000000001003E000-memory.dmp
memory/2260-18-0x0000000010000000-0x000000001003E000-memory.dmp
memory/2260-16-0x0000000010000000-0x000000001003E000-memory.dmp
memory/2260-14-0x0000000010000000-0x000000001003E000-memory.dmp
memory/2260-13-0x0000000010000000-0x000000001003E000-memory.dmp
memory/2260-12-0x0000000010000000-0x000000001003E000-memory.dmp
memory/2260-38-0x0000000010000000-0x000000001003E000-memory.dmp
memory/2260-57-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-66-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-67-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-68-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-69-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-72-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-73-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-74-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-75-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-76-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-77-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-78-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-79-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-80-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-81-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-82-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-83-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-84-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-85-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-86-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-87-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-88-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-92-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-93-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-94-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-95-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-96-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-97-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-98-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-99-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-100-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-101-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-102-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-103-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-104-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-105-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-106-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-107-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-108-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-109-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-110-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-111-0x0000000000D2B000-0x000000000137F000-memory.dmp
memory/2260-112-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-113-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-114-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-115-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-116-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-117-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-118-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-119-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-120-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-121-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-122-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-123-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-124-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-125-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-126-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-127-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-128-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-129-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-130-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-131-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-132-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-133-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-134-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-135-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-136-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-137-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-138-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-139-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-140-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-141-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-142-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-143-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-144-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-145-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-146-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-147-0x0000000000400000-0x0000000001EAE000-memory.dmp
memory/2260-148-0x0000000000400000-0x0000000001EAE000-memory.dmp