Analysis
- max time kernel
151s - max time network
155s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
05/08/2026, 18:30
General
- Target setup_r8010.exe
- Size 61.7MB
- Sample260805-w5p5wadr21
- SHA256 1fdac98bf28814dc8d658cffc50a3434ba349e2e44920c93073d7831f255fc41
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
- Loads dropped DLL 1 IoCs
- Drops file in System32 directory 1 IoCs
- Suspicious behavior: EnumeratesProcesses 64 IoCs
- Suspicious behavior: LoadsDriver 5 IoCs
- Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
Processes
-
C:\Users\Admin\AppData\Local\Temp\setup_r8010.exe"C:\Users\Admin\AppData\Local\Temp\setup_r8010.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
-
C:\Users\Public\OQ59Tp\lQveib.exe"C:\Users\Public\OQ59Tp\lQveib.exe"1⤵
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
UxEnhance64.dll
adoresd.dat
lQveib.exe
msadox.tb
memory/3452-537-0x00007FFC3A600000-0x00007FFC3A602000-memory.dmp
memory/3452-558-0x000001DAF56A0000-0x000001DAF572A000-memory.dmp
memory/3452-562-0x000001DAF4E00000-0x000001DAF5691000-memory.dmp
memory/3452-529-0x00007FFC3A5F0000-0x00007FFC3A5F2000-memory.dmp
memory/3452-530-0x00007FFC179A0000-0x00007FFC17EBE000-memory.dmp
memory/3452-560-0x000001DAF56A0000-0x000001DAF572A000-memory.dmp
memory/3452-557-0x000001DAF56A0000-0x000001DAF572A000-memory.dmp
memory/3452-535-0x000001DAF4E00000-0x000001DAF5691000-memory.dmp
memory/3452-559-0x000001DAF56A0000-0x000001DAF572A000-memory.dmp
memory/3452-539-0x000001DAF4E00000-0x000001DAF5691000-memory.dmp
memory/3452-542-0x000001DAF4E00000-0x000001DAF5691000-memory.dmp
memory/3452-543-0x000001DAF4E00000-0x000001DAF5691000-memory.dmp
memory/3452-544-0x000001DAF4E00000-0x000001DAF5691000-memory.dmp
memory/3452-545-0x000001DAF4E00000-0x000001DAF5691000-memory.dmp
memory/3452-549-0x000001DAF4E00000-0x000001DAF5691000-memory.dmp
memory/3452-555-0x000001DAF4340000-0x000001DAF438E000-memory.dmp
memory/4528-524-0x00007FFC2FCB0000-0x00007FFC2FCC2000-memory.dmp
memory/4528-0-0x0000000000570000-0x000000000057D000-memory.dmp
memory/4528-1-0x0000000000580000-0x000000000058B000-memory.dmp
memory/4528-503-0x00007FFC2FCB0000-0x00007FFC2FCC2000-memory.dmp
memory/4528-523-0x0000000000570000-0x000000000057D000-memory.dmp