Analysis
- max time kernel
148s - max time network
130s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
05/08/2026, 12:33
General
- Target WandEnhancer.exe
- Size 1.1MB
- Sample260805-prl3qsfr8x
- SHA256 48db9ee9914f898cb723e42e4ea16355b4a766e80ac917ed08e90dc1eb58ecc3
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\WandEnhancer.exe"C:\Users\Admin\AppData\Local\Temp\WandEnhancer.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4972-0-0x00007FFFCFFEF000-0x00007FFFCFFF0000-memory.dmp
memory/4972-1-0x0000000000E10000-0x0000000000F34000-memory.dmp
memory/4972-2-0x00007FFFCFE60000-0x00007FFFD0804000-memory.dmp
memory/4972-3-0x00007FFFCFE60000-0x00007FFFD0804000-memory.dmp
memory/4972-4-0x00007FFFCFE60000-0x00007FFFD0804000-memory.dmp
memory/4972-5-0x00007FFFCFE60000-0x00007FFFD0804000-memory.dmp
memory/4972-6-0x00007FFFCFE60000-0x00007FFFD0804000-memory.dmp
memory/4972-7-0x00007FFFCFE60000-0x00007FFFD0804000-memory.dmp
memory/4972-8-0x00007FFFCFE60000-0x00007FFFD0804000-memory.dmp
memory/4972-9-0x00007FFFCFE60000-0x00007FFFD0804000-memory.dmp
memory/4972-10-0x00007FFFCFE60000-0x00007FFFD0804000-memory.dmp
memory/4972-11-0x00007FFFCFE60000-0x00007FFFD0804000-memory.dmp
memory/4972-12-0x0000000023BB0000-0x0000000023BB8000-memory.dmp
memory/4972-14-0x0000000023B00000-0x0000000023B0E000-memory.dmp
memory/4972-13-0x0000000023B30000-0x0000000023B6E000-memory.dmp
memory/4972-15-0x00007FFFCFE60000-0x00007FFFD0804000-memory.dmp
memory/4972-16-0x00007FFFCFE60000-0x00007FFFD0804000-memory.dmp
memory/4972-17-0x0000000025790000-0x00000000257B2000-memory.dmp
memory/4972-18-0x00007FFFCFE60000-0x00007FFFD0804000-memory.dmp
memory/4972-19-0x00007FFFCFE60000-0x00007FFFD0804000-memory.dmp
memory/4972-20-0x00007FFFCFE60000-0x00007FFFD0804000-memory.dmp
memory/4972-21-0x00007FFFCFE60000-0x00007FFFD0804000-memory.dmp
memory/4972-22-0x00007FFFCFE60000-0x00007FFFD0804000-memory.dmp