Analysis
- max time kernel
148s - max time network
115s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
07/08/2026, 11:41
General
- Target Payment as of 07-08-2026 for amount USD 74,770.js
- Size 3.0MB
- Sample260807-ntssmaxsgt
- SHA256 06d18e95ed86e15b80c3037e6444556eff0e18a645b20e84ee4ae3d754831944
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
- Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
- Command and Scripting Interpreter: JavaScript 1 TTPs
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Modifies registry class 2 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Windows\system32\wscript.exewscript.exe "C:\Users\Admin\AppData\Local\Temp\Payment as of 07-08-2026 for amount USD 74,770.js"1⤵
- Modifies registry class
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\Documents\DDTVHOTLHNMPOJXV.PIF"C:\Users\Admin\Documents\DDTVHOTLHNMPOJXV.PIF" C:\Users\Admin\Documents\DDTVHOTLHNMPOJXV.ttf2⤵
- Executes dropped EXE
- Suspicious use of NtSetInformationThreadHideFromDebugger
- System Location Discovery: System Language Discovery
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
DDTVHOTLHNMPOJXV.PIF
DDTVHOTLHNMPOJXV.ttf
memory/4344-9-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-10-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-14-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-16-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-15-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-20-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-21-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-19-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-18-0x0000000000CB0000-0x0000000000CB1000-memory.dmp
memory/4344-17-0x0000000000C60000-0x0000000000C61000-memory.dmp
memory/4344-13-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-12-0x0000000000C50000-0x0000000000C51000-memory.dmp
memory/4344-11-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-23-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-27-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-33-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-32-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-31-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-30-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-29-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-28-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-26-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-25-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-24-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-22-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-34-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-37-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-35-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-36-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-38-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-72-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-71-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-70-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-69-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-59-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-58-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-57-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-56-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-55-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-54-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-53-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-52-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-51-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-50-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-49-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-46-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-45-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-44-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-43-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-42-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-41-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-40-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-68-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-67-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-66-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-65-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-64-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-63-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-62-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-61-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-60-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-48-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-47-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/4344-39-0x000000007FE90000-0x000000007FEA0000-memory.dmp