Analysis
- max time kernel
60s - max time network
67s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
09/08/2026, 09:06
General
- Target WinBox.exe
- Size 52.0MB
- Sample260809-k2swtacl6y
- SHA256 b2d2af264a86266799e992b654f0ab767af128130082620cb9369888a8962631
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\WinBox.exe"C:\Users\Admin\AppData\Local\Temp\WinBox.exe"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2552-0-0x0000025623C60000-0x00000256240A2000-memory.dmp
memory/2552-2-0x00000256240B0000-0x00000256242B2000-memory.dmp
memory/2552-55-0x000002563E990000-0x000002563E991000-memory.dmp
memory/2552-54-0x000002563E990000-0x000002563E991000-memory.dmp
memory/2552-53-0x000002563E990000-0x000002563E991000-memory.dmp
memory/2552-52-0x000002563E990000-0x000002563E991000-memory.dmp
memory/2552-70-0x000002563ECE0000-0x000002563ECF6000-memory.dmp
memory/2552-111-0x000002563ED60000-0x000002563ED61000-memory.dmp
memory/2552-116-0x000002563ED70000-0x000002563ED71000-memory.dmp
memory/2552-121-0x000002563EDA0000-0x000002563EDA1000-memory.dmp
memory/2552-119-0x000002563ED80000-0x000002563ED81000-memory.dmp
memory/2552-118-0x000002563ED80000-0x000002563ED81000-memory.dmp
memory/2552-114-0x000002563ED70000-0x000002563ED71000-memory.dmp
memory/2552-112-0x000002563ED60000-0x000002563ED61000-memory.dmp
memory/2552-110-0x000002563ED30000-0x000002563ED31000-memory.dmp
memory/2552-109-0x000002563ED60000-0x000002563ED61000-memory.dmp
memory/2552-107-0x000002563ED50000-0x000002563ED53000-memory.dmp
memory/2552-106-0x000002563ED50000-0x000002563ED53000-memory.dmp
memory/2552-105-0x000002563ED50000-0x000002563ED53000-memory.dmp
memory/2552-104-0x000002563ED50000-0x000002563ED53000-memory.dmp
memory/2552-103-0x000002563ED10000-0x000002563ED11000-memory.dmp
memory/2552-102-0x000002563ED40000-0x000002563ED41000-memory.dmp
memory/2552-101-0x000002563ED40000-0x000002563ED41000-memory.dmp
memory/2552-99-0x000002563ED20000-0x000002563ED21000-memory.dmp
memory/2552-98-0x000002563ED30000-0x000002563ED31000-memory.dmp
memory/2552-97-0x000002563ED20000-0x000002563ED21000-memory.dmp
memory/2552-96-0x000002563ED30000-0x000002563ED31000-memory.dmp
memory/2552-95-0x000002563ED30000-0x000002563ED31000-memory.dmp
memory/2552-93-0x000002563ED20000-0x000002563ED21000-memory.dmp
memory/2552-91-0x000002563ED10000-0x000002563ED11000-memory.dmp
memory/2552-90-0x000002563ED10000-0x000002563ED11000-memory.dmp
memory/2552-89-0x000002563ED00000-0x000002563ED01000-memory.dmp
memory/2552-88-0x000002563ED10000-0x000002563ED11000-memory.dmp
memory/2552-86-0x000002563ED00000-0x000002563ED01000-memory.dmp
memory/2552-85-0x000002563ED00000-0x000002563ED01000-memory.dmp
memory/2552-84-0x000002563ECE0000-0x000002563ECF6000-memory.dmp
memory/2552-83-0x000002563ED00000-0x000002563ED01000-memory.dmp
memory/2552-82-0x000002563ED00000-0x000002563ED01000-memory.dmp
memory/2552-80-0x000002563ECE0000-0x000002563ECF6000-memory.dmp
memory/2552-79-0x000002563ECE0000-0x000002563ECF6000-memory.dmp
memory/2552-78-0x000002563ECE0000-0x000002563ECF6000-memory.dmp
memory/2552-77-0x000002563ECE0000-0x000002563ECF6000-memory.dmp
memory/2552-76-0x000002563ECE0000-0x000002563ECF6000-memory.dmp
memory/2552-75-0x000002563ECE0000-0x000002563ECF6000-memory.dmp
memory/2552-74-0x000002563ECE0000-0x000002563ECF6000-memory.dmp
memory/2552-73-0x000002563ECD0000-0x000002563ECD1000-memory.dmp
memory/2552-72-0x000002563ECD0000-0x000002563ECD1000-memory.dmp
memory/2552-71-0x000002563ECD0000-0x000002563ECD1000-memory.dmp
memory/2552-69-0x000002563ECE0000-0x000002563ECF6000-memory.dmp
memory/2552-68-0x000002563ECD0000-0x000002563ECD1000-memory.dmp
memory/2552-67-0x000002563ECD0000-0x000002563ECD1000-memory.dmp
memory/2552-65-0x000002563ECC0000-0x000002563ECC1000-memory.dmp
memory/2552-64-0x000002563ECC0000-0x000002563ECC1000-memory.dmp
memory/2552-63-0x000002563ECC0000-0x000002563ECC1000-memory.dmp
memory/2552-62-0x000002563ECC0000-0x000002563ECC1000-memory.dmp
memory/2552-61-0x000002563ECC0000-0x000002563ECC1000-memory.dmp
memory/2552-59-0x000002563ECC0000-0x000002563ECC1000-memory.dmp
memory/2552-57-0x000002563E990000-0x000002563E991000-memory.dmp
memory/2552-115-0x000002563ED70000-0x000002563ED71000-memory.dmp
memory/2552-60-0x000002563ECC0000-0x000002563ECC1000-memory.dmp
memory/2552-56-0x000002563E990000-0x000002563E991000-memory.dmp
memory/2552-123-0x000002563EDA0000-0x000002563EDA1000-memory.dmp
memory/2552-122-0x000002563ED20000-0x000002563ED21000-memory.dmp
memory/2552-124-0x000002563EDA0000-0x000002563EDA1000-memory.dmp