8cc78abc5a9264080fb2c0f8f918e38909b456021ad86748782aa8a6e00132e8

Analysis

max time kernel
148s
max time network
144s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
08/08/2026, 12:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
scenario_sharpernerdotnet___39be46c8-ab5a-4a77-8cb0-ee6ecb5dbc2e.exe
Size 15KB
Sample260808-pgx29az1f1
SHA256 8cc78abc5a9264080fb2c0f8f918e38909b456021ad86748782aa8a6e00132e8
MD5 f2cb3915a1df9a9ad5376fe30ed201be
SHA1 41d810eb3491e8a430b385f838b547370c14c880
SHA512 87f09a8fb03ef3294d59984e9e51c1e212c6b43c0db17671d6ed94377544e58d14c9027bc495e25ca77817c00040e64c6ad3e67ff90cf4826d7267da66f841f5
SSDEEP 384:+0YVM1iZZJqCbh8fa3IvnKnBRCJxU3kPR8YHUSKEZ6vV:+07KLvV
TLSH
T16962610D5AA4C7A7E699063705E6C300D2B1A008F9FE5FEA1B8C45495E2D19A8F4FFDC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Network Service Discovery 1 TTPs 1 IoCs

Attempt to gather information on host's network.

discovery

Network Service Discovery

T1046

pid	Process
6000	scenario_sharpernerdotnet___39be46c8-ab5a-4a77-8cb0-ee6ecb5dbc2e.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 6000 wrote to memory of 6140	6000	scenario_sharpernerdotnet___39be46c8-ab5a-4a77-8cb0-ee6ecb5dbc2e.exe	90
PID 6000 wrote to memory of 6140	6000	scenario_sharpernerdotnet___39be46c8-ab5a-4a77-8cb0-ee6ecb5dbc2e.exe	90
PID 6140 wrote to memory of 4128	6140	explorer.exe	91

C:\Users\Admin\AppData\Local\Temp\scenario_sharpernerdotnet___39be46c8-ab5a-4a77-8cb0-ee6ecb5dbc2e.exe
"C:\Users\Admin\AppData\Local\Temp\scenario_sharpernerdotnet___39be46c8-ab5a-4a77-8cb0-ee6ecb5dbc2e.exe"
1⤵
- Network Service Discovery
- Suspicious use of WriteProcessMemory
PID:6000
- C:\Windows\explorer.exe
  C:/Windows/explorer.exe
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:6140
- - C:\Windows\notepad.exe
    notepad.exe
    3⤵
    PID:4128

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

T1046

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/6000-0-0x0000000000180000-0x000000000018A000-memory.dmp

Download

memory/6000-1-0x00007FFB5540F000-0x00007FFB55410000-memory.dmp

Download

memory/6000-2-0x00007FFB55280000-0x00007FFB55C24000-memory.dmp

Download

memory/6000-4-0x00007FFB55280000-0x00007FFB55C24000-memory.dmp

Download

memory/6140-3-0x0000000000E30000-0x0000000000E31000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads