Analysis
- user interaction
yes - max time kernel
19s - max time network
10s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-de - resource tags
- submitted
06/08/2026, 18:05
General
- Target TER 0.0.3/The Escapists Reincarcerated.exe
- Size 656KB
- Sample260806-wn9sysxcmd
- SHA256 7bc58a214bb9c0f06a1ee0a7a3a0524f81653caf160b7084861ea6c6c8fd4e21
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 2 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\TER 0.0.3\The Escapists Reincarcerated.exe"C:\Users\Admin\AppData\Local\Temp\TER 0.0.3\The Escapists Reincarcerated.exe"1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\TER 0.0.3\UnityCrashHandler64.exe"C:\Users\Admin\AppData\Local\Temp\TER 0.0.3\UnityCrashHandler64.exe" --attach 4112 25627574312962⤵
-
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x00000000000004D4 0x00000000000004CC1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4112-0-0x00000254B0500000-0x00000254B0510000-memory.dmp
memory/4112-1-0x00000254B0430000-0x00000254B0440000-memory.dmp
memory/4112-3-0x00000254B0500000-0x00000254B0510000-memory.dmp
memory/4112-4-0x00000254B0430000-0x00000254B0440000-memory.dmp
memory/4112-2-0x0000025590A50000-0x0000025591492000-memory.dmp