Analysis
- max time kernel
151s - max time network
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
05/08/2026, 03:31
General
- Target inst_smt012.exe
- Size 55.2MB
- Sample260805-d3dd7axdrb
- SHA256 690839bcb7d335658a681ccd738d968a2812552be1839fbcbd06cbf814c0c945
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
- Loads dropped DLL 1 IoCs
- Adds Run key to start application 2 TTPs 1 IoCs
- Drops file in System32 directory 1 IoCs
- Suspicious behavior: EnumeratesProcesses 64 IoCs
- Suspicious behavior: LoadsDriver 5 IoCs
- Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
Processes
-
C:\Users\Admin\AppData\Local\Temp\inst_smt012.exe"C:\Users\Admin\AppData\Local\Temp\inst_smt012.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
-
C:\Users\Public\qpnmp8\YpPtQU.exe"C:\Users\Public\qpnmp8\YpPtQU.exe"1⤵
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
- Drops file in System32 directory
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
UxEnhance64.dll
YpPtQU.exe
adoresd.dat
msadox.tb
memory/4332-538-0x000001EAF4EC0000-0x000001EAF5751000-memory.dmp
memory/4332-560-0x000001EAF4400000-0x000001EAF448A000-memory.dmp
memory/4332-564-0x000001EAF4EC0000-0x000001EAF5751000-memory.dmp
memory/4332-529-0x00007FFD3D2B0000-0x00007FFD3D2B2000-memory.dmp
memory/4332-530-0x00007FFD1A980000-0x00007FFD1AE9E000-memory.dmp
memory/4332-562-0x000001EAF4EC0000-0x000001EAF5751000-memory.dmp
memory/4332-555-0x000001EAF4290000-0x000001EAF42DE000-memory.dmp
memory/4332-535-0x000001EAF4EC0000-0x000001EAF5751000-memory.dmp
memory/4332-556-0x000001EAF4400000-0x000001EAF448A000-memory.dmp
memory/4332-537-0x00007FFD3D2C0000-0x00007FFD3D2C2000-memory.dmp
memory/4332-542-0x000001EAF4EC0000-0x000001EAF5751000-memory.dmp
memory/4332-543-0x000001EAF4EC0000-0x000001EAF5751000-memory.dmp
memory/4332-545-0x000001EAF4EC0000-0x000001EAF5751000-memory.dmp
memory/4332-544-0x000001EAF4EC0000-0x000001EAF5751000-memory.dmp
memory/4332-549-0x000001EAF4EC0000-0x000001EAF5751000-memory.dmp
memory/4332-558-0x000001EAF4400000-0x000001EAF448A000-memory.dmp
memory/4332-559-0x000001EAF4400000-0x000001EAF448A000-memory.dmp
memory/4844-524-0x00007FFD2CD00000-0x00007FFD2CD12000-memory.dmp
memory/4844-0-0x0000000005700000-0x000000000570D000-memory.dmp
memory/4844-1-0x0000000005710000-0x000000000571B000-memory.dmp
memory/4844-503-0x00007FFD2CD00000-0x00007FFD2CD12000-memory.dmp
memory/4844-523-0x0000000005700000-0x000000000570D000-memory.dmp