Analysis
- max time kernel
298s - max time network
250s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
08/08/2026, 01:25
General
- Target Deceive.exe
- Size 1.7MB
- Sample260808-btff3sxdne
- SHA256 59b644c44b4462f80446cd7c9534a6ae6f1628f13b1897c8b648c34abd49e42a
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 6 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Deceive.exe"C:\Users\Admin\AppData\Local\Temp\Deceive.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1320-0-0x000001DBF4420000-0x000001DBF45E4000-memory.dmp
memory/1320-1-0x000001DBF62C0000-0x000001DBF62D0000-memory.dmp
memory/1320-3-0x000001DBF4A40000-0x000001DBF4A5A000-memory.dmp
memory/1320-2-0x000001DBF4980000-0x000001DBF498C000-memory.dmp
memory/1320-4-0x000001DBF6230000-0x000001DBF626A000-memory.dmp
memory/1320-6-0x000001DBF4A70000-0x000001DBF4A78000-memory.dmp
memory/1320-5-0x000001DBF4990000-0x000001DBF49A8000-memory.dmp
memory/1320-7-0x000001DBF4A60000-0x000001DBF4A70000-memory.dmp
memory/1320-8-0x000001DBF6270000-0x000001DBF6298000-memory.dmp
memory/1320-9-0x000001DBF6300000-0x000001DBF6308000-memory.dmp
memory/1320-11-0x000001DBF6D40000-0x000001DBF6DC2000-memory.dmp