Analysis

  • max time kernel
    151s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    09/08/2026, 22:10

General

  • Target
    Setup.exe
  • Size 62.1MB
  • Sample260809-13kvlawfpf
  • SHA256 4f30e5b938fe359ff4e102cfe40702cd80a07579c22c37e1a77fc1f65840cfac
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Setup.exe
    "C:\Users\Admin\AppData\Local\Temp\Setup.exe"
    1⤵
    • Loads dropped DLL
    • Modifies registry class
    • Suspicious use of AdjustPrivilegeToken
    PID:7076

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        D3DCompiler_47_cor3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\Setup\J8jneXp5rWnS\D3DCompiler_47_cor3.dll
        • Size 4.5MB
        • SHA256 a05f99734f7c4822fefc12b367af21fd0976ed6608752fb1e1e80b6ece7ecbbb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PresentationNative_cor3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\Setup\J8jneXp5rWnS\PresentationNative_cor3.dll
        • Size 1.2MB
        • SHA256 58c4e1174515ec7d07dc6b1a5c258aae88572576e1bc9f09ea92e555752b2554
        • MD5 SHA1 SHA512 SSDEEP TLSH

        wpfgfx_cor3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\Setup\J8jneXp5rWnS\wpfgfx_cor3.dll
        • Size 1.9MB
        • SHA256 098d9cefaca7b1e36460eb28f2725d7afdb8e93855c29f8dd3627a1fb692ae8e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/7076-80-0x0000025C169E0000-0x0000025C16A30000-memory.dmp

        memory/7076-84-0x0000025C174F0000-0x0000025C17C60000-memory.dmp

        memory/7076-37-0x0000025C4B210000-0x0000025C4B230000-memory.dmp

        memory/7076-57-0x0000025C16620000-0x0000025C16640000-memory.dmp

        memory/7076-69-0x0000025C16680000-0x0000025C166A0000-memory.dmp

        memory/7076-65-0x0000025C166D0000-0x0000025C16700000-memory.dmp

        memory/7076-61-0x0000025C16640000-0x0000025C16660000-memory.dmp

        memory/7076-53-0x0000025C506A0000-0x0000025C506C0000-memory.dmp

        memory/7076-49-0x0000025C4F740000-0x0000025C4F760000-memory.dmp

        memory/7076-45-0x0000025C4B2F0000-0x0000025C4B300000-memory.dmp

        memory/7076-41-0x0000025C50750000-0x0000025C507D0000-memory.dmp

        memory/7076-21-0x0000025C4F310000-0x0000025C4F360000-memory.dmp

        memory/7076-25-0x0000025C4B2A0000-0x0000025C4B2E0000-memory.dmp

        memory/7076-9-0x0000025C12950000-0x0000025C13870000-memory.dmp

        memory/7076-29-0x0000025C4F6D0000-0x0000025C4F720000-memory.dmp

        memory/7076-6-0x0000025C4E150000-0x0000025C4F0A0000-memory.dmp

        memory/7076-33-0x0000025C14060000-0x0000025C14850000-memory.dmp

        memory/7076-76-0x0000025C168E0000-0x0000025C169E0000-memory.dmp

        memory/7076-88-0x0000025C16A60000-0x0000025C16A90000-memory.dmp

        memory/7076-104-0x0000025C16B10000-0x0000025C16B30000-memory.dmp

        memory/7076-103-0x0000025C16C30000-0x0000025C16CF0000-memory.dmp

        memory/7076-96-0x0000025C16AC0000-0x0000025C16AE0000-memory.dmp

        memory/7076-92-0x0000025C16A90000-0x0000025C16AA0000-memory.dmp

        memory/7076-112-0x0000025C16D60000-0x0000025C16D80000-memory.dmp

        memory/7076-108-0x0000025C18A60000-0x0000025C18A90000-memory.dmp

        memory/7076-116-0x0000025C18B50000-0x0000025C18BA0000-memory.dmp

        memory/7076-124-0x0000025C18CA0000-0x0000025C18CE0000-memory.dmp

        memory/7076-128-0x0000025C18AD0000-0x0000025C18AE0000-memory.dmp

        memory/7076-120-0x0000025C18C40000-0x0000025C18CA0000-memory.dmp

        memory/7076-13-0x0000025C4CFB0000-0x0000025C4D1D0000-memory.dmp

        memory/7076-17-0x0000025C4F4C0000-0x0000025C4F620000-memory.dmp

        memory/7076-137-0x0000025C192E0000-0x0000025C19390000-memory.dmp

        memory/7076-141-0x0000025C19400000-0x0000025C19470000-memory.dmp

        memory/7076-145-0x0000025C16B60000-0x0000025C16B70000-memory.dmp

        memory/7076-149-0x0000025C1B620000-0x0000025C1B630000-memory.dmp