Analysis
- user interaction
yes - max time kernel
58s - max time network
62s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
09/08/2026, 09:06
General
- Target WinBox.exe
- Size 52.0MB
- Sample260809-k2swtacl6y
- SHA256 b2d2af264a86266799e992b654f0ab767af128130082620cb9369888a8962631
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 2 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of SetWindowsHookEx 2 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\WinBox.exe"C:\Users\Admin\AppData\Local\Temp\WinBox.exe"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\WinBox.exeC:\Users\Admin\AppData\Local\Temp\WinBox.exe --binary-settings2⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
0eb275b35cc96d4161371dbd794fc97842d4093d.qmlc
200af37bd0f9814ff40cb753f7b5bac354973644.qmlc
29c19e8f881ea200e713dea43bfaf609cc2aabc5.qmlc
39ec586142c26040122de6a7f062acb19b619eea.qmlc
3a7636e5dbc29e3354e4e0aad753114065430af0.qmlc
409dfcae27e899a5023be3cd84e752caa2301ba6.qmlc
49ec827f853cbf34884ae43990c5d36c5e2d4a03.qmlc
4eab9c900add2e5ee5d2b11a5237af42e8863995.qmlc
67b9a1106c4419fffa0ea5824f0ec4954863545b.qmlc
698bdd1be02170c768a8cbd2e0810be411f787d5.qmlc
6ff6a74517a000f0ef61b7f1706446e8193800a4.qmlc
897366d21919e259d747bfc351bd9eb8145cf573.qmlc
935d09fbb09ec87fdae011d147a1d9c0d5f1a26f.qmlc
941c2a66914dde463484dc9c9e0db50ce9211bf1.qmlc
9e8af8236448418fd2f00ab9714deea12d045656.qmlc
a149ac47540017deea8c332e3d87188ca4ef52eb.qmlc
a480a4ebd40ae12036769b5a91573992886e6449.qmlc
b24fa691a05346b204fc7e74619a49d60535fd1d.qmlc
c1558e5972531e069eb31f77cb266503181439d7.qmlc
c36ae9c3ab7f5cf04eb1200a362a142f0f6f2da4.qmlc
cff1d099fe3668a71b891c7a783c8a9261ac6222.qmlc
d85aba312513c18e0be649e22395846ce97133fe.qmlc
da6edcd458f5a07eadbc984f32cfe74465584b54.qmlc
ecab5d70fe61c58c19157eb8dc67b34c49531914.qmlc
memory/3472-111-0x000001E8EF190000-0x000001E8EF191000-memory.dmp
memory/3472-70-0x000001E8EA800000-0x000001E8EA816000-memory.dmp
memory/3472-106-0x000001E8EF180000-0x000001E8EF183000-memory.dmp
memory/3472-105-0x000001E8EF180000-0x000001E8EF183000-memory.dmp
memory/3472-104-0x000001E8EF180000-0x000001E8EF183000-memory.dmp
memory/3472-103-0x000001E8EA830000-0x000001E8EA831000-memory.dmp
memory/3472-102-0x000001E8EA860000-0x000001E8EA861000-memory.dmp
memory/3472-101-0x000001E8EA860000-0x000001E8EA861000-memory.dmp
memory/3472-99-0x000001E8EA840000-0x000001E8EA841000-memory.dmp
memory/3472-98-0x000001E8EA850000-0x000001E8EA851000-memory.dmp
memory/3472-97-0x000001E8EA840000-0x000001E8EA841000-memory.dmp
memory/3472-96-0x000001E8EA850000-0x000001E8EA851000-memory.dmp
memory/3472-95-0x000001E8EA850000-0x000001E8EA851000-memory.dmp
memory/3472-93-0x000001E8EA840000-0x000001E8EA841000-memory.dmp
memory/3472-91-0x000001E8EA830000-0x000001E8EA831000-memory.dmp
memory/3472-90-0x000001E8EA830000-0x000001E8EA831000-memory.dmp
memory/3472-89-0x000001E8EA820000-0x000001E8EA821000-memory.dmp
memory/3472-88-0x000001E8EA830000-0x000001E8EA831000-memory.dmp
memory/3472-86-0x000001E8EA820000-0x000001E8EA821000-memory.dmp
memory/3472-85-0x000001E8EA820000-0x000001E8EA821000-memory.dmp
memory/3472-84-0x000001E8EA800000-0x000001E8EA816000-memory.dmp
memory/3472-83-0x000001E8EA820000-0x000001E8EA821000-memory.dmp
memory/3472-82-0x000001E8EA820000-0x000001E8EA821000-memory.dmp
memory/3472-80-0x000001E8EA800000-0x000001E8EA816000-memory.dmp
memory/3472-79-0x000001E8EA800000-0x000001E8EA816000-memory.dmp
memory/3472-78-0x000001E8EA800000-0x000001E8EA816000-memory.dmp
memory/3472-76-0x000001E8EA800000-0x000001E8EA816000-memory.dmp
memory/3472-74-0x000001E8EA800000-0x000001E8EA816000-memory.dmp
memory/3472-73-0x000001E8EA7F0000-0x000001E8EA7F1000-memory.dmp
memory/3472-72-0x000001E8EA7F0000-0x000001E8EA7F1000-memory.dmp
memory/3472-71-0x000001E8EA7F0000-0x000001E8EA7F1000-memory.dmp
memory/3472-107-0x000001E8EF180000-0x000001E8EF183000-memory.dmp
memory/3472-69-0x000001E8EA800000-0x000001E8EA816000-memory.dmp
memory/3472-68-0x000001E8EA7F0000-0x000001E8EA7F1000-memory.dmp
memory/3472-67-0x000001E8EA7F0000-0x000001E8EA7F1000-memory.dmp
memory/3472-65-0x000001E8EA7E0000-0x000001E8EA7E1000-memory.dmp
memory/3472-64-0x000001E8EA7E0000-0x000001E8EA7E1000-memory.dmp
memory/3472-63-0x000001E8EA7E0000-0x000001E8EA7E1000-memory.dmp
memory/3472-62-0x000001E8EA7E0000-0x000001E8EA7E1000-memory.dmp
memory/3472-61-0x000001E8EA7E0000-0x000001E8EA7E1000-memory.dmp
memory/3472-109-0x000001E8EF190000-0x000001E8EF191000-memory.dmp
memory/3472-110-0x000001E8EA850000-0x000001E8EA851000-memory.dmp
memory/3472-2-0x000001E8D6320000-0x000001E8D6522000-memory.dmp
memory/3472-112-0x000001E8EF190000-0x000001E8EF191000-memory.dmp
memory/3472-114-0x000001E8EF1A0000-0x000001E8EF1A1000-memory.dmp
memory/3472-115-0x000001E8EF1A0000-0x000001E8EF1A1000-memory.dmp
memory/3472-116-0x000001E8EF1A0000-0x000001E8EF1A1000-memory.dmp
memory/3472-118-0x000001E8EF1B0000-0x000001E8EF1B1000-memory.dmp
memory/3472-119-0x000001E8EF1B0000-0x000001E8EF1B1000-memory.dmp
memory/3472-121-0x000001E8EF1D0000-0x000001E8EF1D1000-memory.dmp
memory/3472-122-0x000001E8EA840000-0x000001E8EA841000-memory.dmp
memory/3472-124-0x000001E8EF1D0000-0x000001E8EF1D1000-memory.dmp
memory/3472-123-0x000001E8EF1D0000-0x000001E8EF1D1000-memory.dmp
memory/3472-77-0x000001E8EA800000-0x000001E8EA816000-memory.dmp
memory/3472-75-0x000001E8EA800000-0x000001E8EA816000-memory.dmp
memory/3472-57-0x000001E8EA4A0000-0x000001E8EA4A1000-memory.dmp
memory/3472-59-0x000001E8EA7E0000-0x000001E8EA7E1000-memory.dmp
memory/3472-60-0x000001E8EA7E0000-0x000001E8EA7E1000-memory.dmp
memory/3472-56-0x000001E8EA4A0000-0x000001E8EA4A1000-memory.dmp
memory/3472-55-0x000001E8EA4A0000-0x000001E8EA4A1000-memory.dmp
memory/3472-54-0x000001E8EA4A0000-0x000001E8EA4A1000-memory.dmp
memory/3472-52-0x000001E8EA4A0000-0x000001E8EA4A1000-memory.dmp
memory/3472-53-0x000001E8EA4A0000-0x000001E8EA4A1000-memory.dmp
memory/3472-0-0x000001E8D5ED0000-0x000001E8D6312000-memory.dmp