Analysis
- max time kernel
150s - max time network
153s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
06/08/2026, 16:07
General
- Target setup_j68001.exe
- Size 53.8MB
- Sample260806-tkxm4ser31
- SHA256 d49782eefe7225eb65b8821a3259485a3fff30d912d884d080323dd251b1d43e
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
- Loads dropped DLL 1 IoCs
- Drops file in System32 directory 1 IoCs
- Suspicious behavior: EnumeratesProcesses 54 IoCs
- Suspicious behavior: LoadsDriver 4 IoCs
- Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
Processes
-
C:\Users\Admin\AppData\Local\Temp\setup_j68001.exe"C:\Users\Admin\AppData\Local\Temp\setup_j68001.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
-
C:\Users\Public\JlBlPV\VW0tPL.exe"C:\Users\Public\JlBlPV\VW0tPL.exe"1⤵
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
UxEnhance64.dll
VW0tPL.exe
adoresd.dat
msadox.tb
memory/292-1-0x0000000000570000-0x000000000057D000-memory.dmp
memory/292-2-0x0000000000590000-0x000000000059B000-memory.dmp
memory/292-504-0x00007FFF7B320000-0x00007FFF7B332000-memory.dmp
memory/292-521-0x0000000000570000-0x000000000057D000-memory.dmp
memory/292-522-0x00007FFF7B320000-0x00007FFF7B332000-memory.dmp
memory/292-0-0x0000000000570000-0x000000000057D000-memory.dmp
memory/472-533-0x0000027F296B0000-0x0000027F29F41000-memory.dmp
memory/472-542-0x0000027F296B0000-0x0000027F29F41000-memory.dmp
memory/472-527-0x00007FFF83970000-0x00007FFF83972000-memory.dmp
memory/472-535-0x00007FFF83980000-0x00007FFF83982000-memory.dmp
memory/472-536-0x0000027F296B0000-0x0000027F29F41000-memory.dmp
memory/472-540-0x0000027F296B0000-0x0000027F29F41000-memory.dmp
memory/472-541-0x0000027F296B0000-0x0000027F29F41000-memory.dmp
memory/472-528-0x00007FFF60E70000-0x00007FFF6138E000-memory.dmp
memory/472-543-0x0000027F296B0000-0x0000027F29F41000-memory.dmp
memory/472-547-0x0000027F296B0000-0x0000027F29F41000-memory.dmp
memory/472-553-0x0000027F28B80000-0x0000027F28BCE000-memory.dmp
memory/472-557-0x0000027F28C70000-0x0000027F28CFA000-memory.dmp
memory/472-558-0x0000027F28C70000-0x0000027F28CFA000-memory.dmp
memory/472-556-0x0000027F28C70000-0x0000027F28CFA000-memory.dmp
memory/472-555-0x0000027F28C70000-0x0000027F28CFA000-memory.dmp
memory/472-560-0x0000027F296B0000-0x0000027F29F41000-memory.dmp