Analysis
- max time kernel
149s - max time network
153s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
09/08/2026, 00:46
General
- Target pro/Risxn Pro.exe
- Size 2.2MB
- Sample260809-a44e8a1wew
- SHA256 f0c607c8d473fbe1c313d605843654ec8988e81126e05ef9c503cd7c5b85090e
Malware Config
Signatures
- Loads dropped DLL 3 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\pro\Risxn Pro.exe"C:\Users\Admin\AppData\Local\Temp\pro\Risxn Pro.exe"1⤵
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
OZvhbILaZdCcz.dll
memory/2168-15-0x00007FFFF9400000-0x00007FFFF9634000-memory.dmp
memory/2168-17-0x00007FFFF8BDF000-0x00007FFFF8BE0000-memory.dmp
memory/2168-16-0x0000028431F00000-0x0000028431F10000-memory.dmp
memory/2168-14-0x000002844CA80000-0x000002844CCB4000-memory.dmp
memory/2168-18-0x00007FFFF8A50000-0x00007FFFF93F4000-memory.dmp
memory/2168-19-0x000002844C840000-0x000002844CA50000-memory.dmp
memory/2168-20-0x00007FFFF8A50000-0x00007FFFF93F4000-memory.dmp
memory/2168-21-0x00007FFFF8A50000-0x00007FFFF93F4000-memory.dmp
memory/2168-22-0x00007FFFF8A50000-0x00007FFFF93F4000-memory.dmp
memory/2168-23-0x000002844CFD0000-0x000002844D082000-memory.dmp
memory/2168-24-0x0000028431F00000-0x0000028431F10000-memory.dmp
memory/2168-25-0x00007FFFF8A50000-0x00007FFFF93F4000-memory.dmp
memory/2168-26-0x00007FFFF8A50000-0x00007FFFF93F4000-memory.dmp