Analysis
- user interaction
yes - max time kernel
60s - max time network
74s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
09/08/2026, 23:25
General
- Target xqzmed.exe
- Size 536KB
- Sample260809-3esawa1sa1
- SHA256 8393839045a589c568ea2992c420ba9fcb63dce1eb865c7a24db423ac24f889a
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\xqzmed.exe"C:\Users\Admin\AppData\Local\Temp\xqzmed.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/252-0-0x00007FF98211F000-0x00007FF982120000-memory.dmp
memory/252-1-0x000002918C060000-0x000002918C0EA000-memory.dmp
memory/252-3-0x000002918C570000-0x000002918C58A000-memory.dmp
memory/252-4-0x00007FF981F90000-0x00007FF982934000-memory.dmp
memory/252-2-0x00000291A66B0000-0x00000291A6778000-memory.dmp
memory/252-5-0x000002918DDC0000-0x000002918DDC8000-memory.dmp
memory/252-6-0x00007FF981F90000-0x00007FF982934000-memory.dmp
memory/252-7-0x000002918DDD0000-0x000002918DDD8000-memory.dmp
memory/252-10-0x000002918DE20000-0x000002918DE3E000-memory.dmp
memory/252-9-0x000002918DE10000-0x000002918DE18000-memory.dmp
memory/252-8-0x000002918DDE0000-0x000002918DE08000-memory.dmp
memory/252-11-0x00007FF981F90000-0x00007FF982934000-memory.dmp
memory/252-12-0x00007FF981F90000-0x00007FF982934000-memory.dmp
memory/252-13-0x00007FF981F90000-0x00007FF982934000-memory.dmp
memory/252-14-0x00007FF981F90000-0x00007FF982934000-memory.dmp
memory/252-15-0x00007FF981F90000-0x00007FF982934000-memory.dmp
memory/252-16-0x00007FF981F90000-0x00007FF982934000-memory.dmp
memory/252-17-0x00007FF981F90000-0x00007FF982934000-memory.dmp
memory/252-18-0x00007FF981F90000-0x00007FF982934000-memory.dmp
memory/252-19-0x00007FF981F90000-0x00007FF982934000-memory.dmp
memory/252-20-0x00007FF981F90000-0x00007FF982934000-memory.dmp
memory/252-21-0x00007FF981F90000-0x00007FF982934000-memory.dmp
memory/252-0-0x00007FF98211F000-0x00007FF982120000-memory.dmp
memory/252-1-0x000002918C060000-0x000002918C0EA000-memory.dmp
memory/252-3-0x000002918C570000-0x000002918C58A000-memory.dmp
memory/252-4-0x00007FF981F90000-0x00007FF982934000-memory.dmp
memory/252-2-0x00000291A66B0000-0x00000291A6778000-memory.dmp
memory/252-5-0x000002918DDC0000-0x000002918DDC8000-memory.dmp
memory/252-6-0x00007FF981F90000-0x00007FF982934000-memory.dmp
memory/252-7-0x000002918DDD0000-0x000002918DDD8000-memory.dmp
memory/252-10-0x000002918DE20000-0x000002918DE3E000-memory.dmp
memory/252-9-0x000002918DE10000-0x000002918DE18000-memory.dmp
memory/252-8-0x000002918DDE0000-0x000002918DE08000-memory.dmp
memory/252-11-0x00007FF981F90000-0x00007FF982934000-memory.dmp
memory/252-12-0x00007FF981F90000-0x00007FF982934000-memory.dmp
memory/252-13-0x00007FF981F90000-0x00007FF982934000-memory.dmp
memory/252-14-0x00007FF981F90000-0x00007FF982934000-memory.dmp
memory/252-15-0x00007FF981F90000-0x00007FF982934000-memory.dmp
memory/252-16-0x00007FF981F90000-0x00007FF982934000-memory.dmp
memory/252-17-0x00007FF981F90000-0x00007FF982934000-memory.dmp
memory/252-18-0x00007FF981F90000-0x00007FF982934000-memory.dmp
memory/252-19-0x00007FF981F90000-0x00007FF982934000-memory.dmp
memory/252-20-0x00007FF981F90000-0x00007FF982934000-memory.dmp
memory/252-21-0x00007FF981F90000-0x00007FF982934000-memory.dmp