Analysis

  • max time kernel
    149s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    05/08/2026, 04:38

General

  • Target
    inst_smt013.exe
  • Size 55.2MB
  • Sample260805-e9dh7sde74
  • SHA256 1de06a93d69aa1fcdc2f0f32cf0ec3a776d9316e32a7e379d90e09e19d808c38
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 38 IoCs
  • Suspicious behavior: LoadsDriver 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\inst_smt013.exe
    "C:\Users\Admin\AppData\Local\Temp\inst_smt013.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:2288
  • C:\Users\Public\JYO34I\jpu3X9.exe
    C:\Users\Public\JYO34I\jpu3X9.exe
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • Suspicious behavior: EnumeratesProcesses
    PID:4084

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        UxEnhance64.dll

        • Path C:\Users\Public\JYO34I\UxEnhance64.dll
        • Size 3.1MB
        • SHA256 e320fffdfea885c0f439d673a389022d4a79976b238f2588ae638c7d2ba2507d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        adoresd.dat

        • Path C:\Users\Public\JYO34I\adoresd.dat
        • Size 4.7MB
        • SHA256 574eadf27987fd00c941c4692f747ff56232e0963f6cbf1c3816d477511fa56d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jpu3X9.exe

        • Path C:\Users\Public\JYO34I\jpu3X9.exe
        • Size 135KB
        • SHA256 676a2a7b94ca2f8ec76352ee656e4d075bb342bd7ad6efbc7c19c060001eace7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        msadox.tb

        • Path C:\Users\Public\JYO34I\msadox.tb
        • Size 8KB
        • SHA256 5f2bc8dd2ef5446b977bb9620f8cfbe8fba61a3613aff1971d471e604b55bdfa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/2288-526-0x00007FFE7EDD0000-0x00007FFE7EDE0000-memory.dmp

        memory/2288-1-0x00000000001F0000-0x00000000001FB000-memory.dmp

        memory/2288-525-0x00000000001E0000-0x00000000001ED000-memory.dmp

        memory/2288-0-0x00000000001E0000-0x00000000001ED000-memory.dmp

        memory/2288-503-0x00007FFE7EDD0000-0x00007FFE7EDE0000-memory.dmp

        memory/4084-532-0x00007FFE70A40000-0x00007FFE70F5E000-memory.dmp

        memory/4084-537-0x0000017FE1E40000-0x0000017FE26D1000-memory.dmp

        memory/4084-531-0x00007FFE8DF70000-0x00007FFE8DF72000-memory.dmp

        memory/4084-540-0x0000017FE1E40000-0x0000017FE26D1000-memory.dmp

        memory/4084-545-0x0000017FE1E40000-0x0000017FE26D1000-memory.dmp

        memory/4084-547-0x0000017FE1E40000-0x0000017FE26D1000-memory.dmp

        memory/4084-546-0x0000017FE1E40000-0x0000017FE26D1000-memory.dmp

        memory/4084-539-0x00007FFE8DF80000-0x00007FFE8DF82000-memory.dmp

        memory/4084-544-0x0000017FE1E40000-0x0000017FE26D1000-memory.dmp