Analysis
- max time kernel
149s - max time network
140s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
06/08/2026, 16:48
General
- Target zremastered.vmp.exe
- Size 13.7MB
- Sample260806-vbmbfswblc
- SHA256 9e3953ba2d80ae84bf0e73e4990caf47713f46b3e3d178640a6cb097135efa14
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 12 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\zremastered.vmp.exe"C:\Users\Admin\AppData\Local\Temp\zremastered.vmp.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\zremastered.vmp.exe"C:\Users\Admin\AppData\Local\Temp\zremastered.vmp.exe" --watchdog 4680 5608 1343050856573910642⤵
- Suspicious behavior: EnumeratesProcesses
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1444-22-0x00007FF758C00000-0x00007FF75A1DF000-memory.dmp
memory/1444-23-0x00007FF758C00000-0x00007FF75A1DF000-memory.dmp
memory/1444-24-0x00007FF758C00000-0x00007FF75A1DF000-memory.dmp
memory/4680-0-0x00007FF758C18000-0x00007FF759432000-memory.dmp
memory/4680-1-0x00007FFD0FE70000-0x00007FFD0FE72000-memory.dmp
memory/4680-5-0x00007FF758C00000-0x00007FF75A1DF000-memory.dmp
memory/4680-2-0x00007FF758C00000-0x00007FF75A1DF000-memory.dmp
memory/4680-6-0x00007FF758C00000-0x00007FF75A1DF000-memory.dmp
memory/4680-16-0x00007FF758C18000-0x00007FF759432000-memory.dmp
memory/4680-17-0x00007FF758C00000-0x00007FF75A1DF000-memory.dmp