Analysis
- max time kernel
150s - max time network
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
05/08/2026, 04:38
General
- Target inst_smt013.exe
- Size 55.2MB
- Sample260805-e9dh7sde74
- SHA256 1de06a93d69aa1fcdc2f0f32cf0ec3a776d9316e32a7e379d90e09e19d808c38
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
- Loads dropped DLL 1 IoCs
- Drops file in System32 directory 1 IoCs
- Suspicious behavior: EnumeratesProcesses 54 IoCs
- Suspicious behavior: LoadsDriver 4 IoCs
- Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
Processes
-
C:\Users\Admin\AppData\Local\Temp\inst_smt013.exe"C:\Users\Admin\AppData\Local\Temp\inst_smt013.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
-
C:\Users\Public\oxMesk\nCDb0v.exe"C:\Users\Public\oxMesk\nCDb0v.exe"1⤵
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
UxEnhance64.dll
adoresd.dat
msadox.tb
nCDb0v.exe
memory/2220-536-0x000001D209C70000-0x000001D20A501000-memory.dmp
memory/2220-558-0x000001D2091C0000-0x000001D20924A000-memory.dmp
memory/2220-563-0x000001D209C70000-0x000001D20A501000-memory.dmp
memory/2220-559-0x000001D2091C0000-0x000001D20924A000-memory.dmp
memory/2220-530-0x00007FFFF2F70000-0x00007FFFF2F72000-memory.dmp
memory/2220-531-0x00007FFFD02F0000-0x00007FFFD080E000-memory.dmp
memory/2220-561-0x000001D2091C0000-0x000001D20924A000-memory.dmp
memory/2220-560-0x000001D2091C0000-0x000001D20924A000-memory.dmp
memory/2220-556-0x000001D207930000-0x000001D20797E000-memory.dmp
memory/2220-538-0x00007FFFF2F80000-0x00007FFFF2F82000-memory.dmp
memory/2220-539-0x000001D209C70000-0x000001D20A501000-memory.dmp
memory/2220-543-0x000001D209C70000-0x000001D20A501000-memory.dmp
memory/2220-544-0x000001D209C70000-0x000001D20A501000-memory.dmp
memory/2220-546-0x000001D209C70000-0x000001D20A501000-memory.dmp
memory/2220-545-0x000001D209C70000-0x000001D20A501000-memory.dmp
memory/2220-550-0x000001D209C70000-0x000001D20A501000-memory.dmp
memory/6080-525-0x00007FFFEAA50000-0x00007FFFEAA62000-memory.dmp
memory/6080-0-0x0000000000490000-0x000000000049D000-memory.dmp
memory/6080-1-0x0000000000490000-0x000000000049D000-memory.dmp
memory/6080-2-0x00000000004A0000-0x00000000004AB000-memory.dmp
memory/6080-504-0x00007FFFEAA50000-0x00007FFFEAA62000-memory.dmp
memory/6080-524-0x0000000000490000-0x000000000049D000-memory.dmp