Analysis
- user interaction
yes - max time kernel
598s - max time network
571s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
- submitted
08/08/2026, 21:49
General
- Target HypnoOverlay v0.3.1.exe
- Size 74.6MB
- Sample260808-1pcbasdp8w
- SHA256 70ecabf692e2ae8447a627b1ec5bcdebdba06bd2d7339e239301325e4bc20184
Malware Config
Signatures
- Loads dropped DLL 3 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of FindShellTrayWindow 1 IoCs
- Suspicious use of SendNotifyMessage 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\HypnoOverlay v0.3.1.exe"C:\Users\Admin\AppData\Local\Temp\HypnoOverlay v0.3.1.exe"1⤵
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
D3DCompiler_47_cor3.dll
PresentationNative_cor3.dll
wpfgfx_cor3.dll
memory/1140-106-0x0000023C94D60000-0x0000023C94D80000-memory.dmp
memory/1140-118-0x0000023C94E80000-0x0000023C94EA0000-memory.dmp
memory/1140-114-0x0000023C95F20000-0x0000023C95F70000-memory.dmp
memory/1140-23-0x000001FBF8030000-0x000001FBF8080000-memory.dmp
memory/1140-52-0x000001FBFACD0000-0x000001FBFACF0000-memory.dmp
memory/1140-55-0x000001FBFBF80000-0x000001FBFBFA0000-memory.dmp
memory/1140-82-0x000001FBFCB00000-0x000001FBFCB50000-memory.dmp
memory/1140-78-0x0000023C94A90000-0x0000023C94BA0000-memory.dmp
memory/1140-15-0x000001FBFA8D0000-0x000001FBFAB00000-memory.dmp
memory/1140-71-0x000001FBFC8D0000-0x000001FBFC8F0000-memory.dmp
memory/1140-67-0x000001FBFC920000-0x000001FBFC950000-memory.dmp
memory/1140-63-0x000001FBFC890000-0x000001FBFC8B0000-memory.dmp
memory/1140-60-0x000001FBFBFC0000-0x000001FBFC000000-memory.dmp
memory/1140-47-0x000001FBF80D0000-0x000001FBF80F0000-memory.dmp
memory/1140-43-0x000001FBF7F90000-0x000001FBF7FA0000-memory.dmp
memory/1140-40-0x000001FBF7F70000-0x000001FBF7F90000-memory.dmp
memory/1140-36-0x000001FBFBEE0000-0x000001FBFBF60000-memory.dmp
memory/1140-86-0x0000023C956C0000-0x0000023C95E60000-memory.dmp
memory/1140-90-0x0000023C94BA0000-0x0000023C94BD0000-memory.dmp
memory/1140-8-0x000001FBF9410000-0x000001FBFA0A0000-memory.dmp
memory/1140-31-0x000001FBFC020000-0x000001FBFC850000-memory.dmp
memory/1140-110-0x000001FBFC970000-0x000001FBFC980000-memory.dmp
memory/1140-27-0x000001FBF8080000-0x000001FBF80C0000-memory.dmp
memory/1140-102-0x0000023C95E60000-0x0000023C95F20000-memory.dmp
memory/1140-98-0x0000023C94BD0000-0x0000023C94C00000-memory.dmp
memory/1140-94-0x0000023C94CA0000-0x0000023C94D30000-memory.dmp
memory/1140-124-0x0000023C97550000-0x0000023C98240000-memory.dmp
memory/1140-132-0x0000023C967A0000-0x0000023C967F0000-memory.dmp
memory/1140-136-0x0000023C98520000-0x0000023C98590000-memory.dmp
memory/1140-144-0x0000023C96400000-0x0000023C96420000-memory.dmp
memory/1140-140-0x0000023C98BB0000-0x0000023C98D20000-memory.dmp
memory/1140-128-0x0000023C98240000-0x0000023C98520000-memory.dmp
memory/1140-153-0x0000023C98F40000-0x0000023C990C0000-memory.dmp
memory/1140-149-0x0000023C989C0000-0x0000023C989E0000-memory.dmp
memory/1140-157-0x0000023C98A10000-0x0000023C98A30000-memory.dmp
memory/1140-161-0x0000023C94F00000-0x0000023C94F10000-memory.dmp
memory/1140-19-0x000001FBFAB00000-0x000001FBFAC60000-memory.dmp
memory/1140-11-0x0000023C916E0000-0x0000023C92640000-memory.dmp
memory/1140-170-0x0000023C9EFC0000-0x0000023C9F000000-memory.dmp
memory/1140-176-0x0000023C991C0000-0x0000023C991D0000-memory.dmp
memory/1140-180-0x0000023CA12A0000-0x0000023CA12B0000-memory.dmp
memory/1140-184-0x0000023CA56D0000-0x0000023CA5730000-memory.dmp