Analysis
- max time kernel
300s - max time network
322s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
09/08/2026, 11:27
General
- Target Spyroid VIP/Spyroid VIP Patched By WantHacks/Spyroid VIP.exe
- Size 87.3MB
- Sample260809-nkffyaac39
- SHA256 25366235c41034f4b036164be8f5ec50126cd456e4032692daf80a9b08e2b466
Malware Config
Signatures
- Costura .NET executable packer 1 IoCs
Costura packer aka Costura Fody, is an add-in for the .NET framework that embeds all external dependency .dll files as resources inside main executable.
- Enumerates system info in registry 2 TTPs 3 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Spyroid VIP\Spyroid VIP Patched By WantHacks\Spyroid VIP.exe"C:\Users\Admin\AppData\Local\Temp\Spyroid VIP\Spyroid VIP Patched By WantHacks\Spyroid VIP.exe"1⤵
- Enumerates system info in registry
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2360-2-0x00007FFD08A90000-0x00007FFD09434000-memory.dmp
memory/2360-1-0x00007FFD08C1F000-0x00007FFD08C20000-memory.dmp
memory/2360-14-0x00007FFD08A90000-0x00007FFD09434000-memory.dmp
memory/2360-5-0x000000001AE30000-0x000000001AFD0000-memory.dmp
memory/2360-26-0x0000000180000000-0x0000000180005000-memory.dmp
memory/2360-23-0x0000000180000000-0x0000000180005000-memory.dmp
memory/2360-20-0x0000000180000000-0x0000000180005000-memory.dmp
memory/2360-17-0x0000000180000000-0x0000000180005000-memory.dmp
memory/2360-15-0x0000000180000000-0x0000000180005000-memory.dmp
memory/2360-4-0x000000001AE30000-0x000000001AFD0000-memory.dmp
memory/2360-3-0x000000001AE30000-0x000000001AFD0000-memory.dmp
memory/2360-0-0x00007FFD08A90000-0x00007FFD09434000-memory.dmp
memory/2360-30-0x00007FFD08A90000-0x00007FFD09434000-memory.dmp
memory/2360-31-0x00007FFD08A90000-0x00007FFD09434000-memory.dmp
memory/2360-33-0x00007FFD08A90000-0x00007FFD09434000-memory.dmp
memory/2360-32-0x000000001D1F0000-0x0000000022208000-memory.dmp
memory/2360-34-0x000000001D1F0000-0x0000000022208000-memory.dmp
memory/2360-40-0x000000001D1F0000-0x0000000022208000-memory.dmp
memory/2360-48-0x000000002C180000-0x0000000031198000-memory.dmp
memory/2360-53-0x00007FFD08A90000-0x00007FFD09434000-memory.dmp
memory/2360-65-0x00007FFD08A90000-0x00007FFD09434000-memory.dmp
memory/2360-79-0x000000001DCE0000-0x000000001DCEA000-memory.dmp
memory/2360-71-0x000000001DCD0000-0x000000001DCDA000-memory.dmp
memory/2360-69-0x000000001DCD0000-0x000000001DCDA000-memory.dmp
memory/2360-80-0x00007FFD0D710000-0x00007FFD0D83F000-memory.dmp
memory/2360-84-0x000000001DCE0000-0x000000001DCEA000-memory.dmp
memory/2360-83-0x000000001DCE0000-0x000000001DCEA000-memory.dmp
memory/2360-82-0x000000001DCE0000-0x000000001DCEA000-memory.dmp
memory/2360-67-0x000000001DCD0000-0x000000001DCDA000-memory.dmp
memory/2360-66-0x000000001DCD0000-0x000000001DCDA000-memory.dmp
memory/2360-87-0x00007FFD08A90000-0x00007FFD09434000-memory.dmp
memory/2360-86-0x000000002C180000-0x0000000031198000-memory.dmp
memory/2360-89-0x000000002C180000-0x0000000031198000-memory.dmp
memory/2360-88-0x000000002C180000-0x0000000031198000-memory.dmp
memory/2360-90-0x000000002C180000-0x0000000031198000-memory.dmp
memory/2360-92-0x000000002C180000-0x0000000031198000-memory.dmp
memory/2360-91-0x000000002C180000-0x0000000031198000-memory.dmp
memory/2360-94-0x000000002C180000-0x0000000031198000-memory.dmp
memory/2360-95-0x000000002C180000-0x0000000031198000-memory.dmp
memory/2360-96-0x000000002C180000-0x0000000031198000-memory.dmp
memory/2360-93-0x000000002C180000-0x0000000031198000-memory.dmp
memory/2360-98-0x000000002C180000-0x0000000031198000-memory.dmp
memory/2360-99-0x000000002C180000-0x0000000031198000-memory.dmp
memory/2360-100-0x000000002C180000-0x0000000031198000-memory.dmp
memory/2360-97-0x000000002C180000-0x0000000031198000-memory.dmp
memory/2360-101-0x000000002C180000-0x0000000031198000-memory.dmp
memory/2360-104-0x000000001DCD0000-0x000000001DCD8000-memory.dmp
memory/2360-103-0x000000001D4F0000-0x000000001D5C3000-memory.dmp
memory/2360-102-0x000000002C180000-0x0000000031198000-memory.dmp
memory/2360-105-0x000000002C180000-0x0000000031198000-memory.dmp
memory/2360-106-0x000000002C180000-0x0000000031198000-memory.dmp
memory/2360-107-0x000000002C180000-0x0000000031198000-memory.dmp
memory/2360-109-0x000000002C180000-0x0000000031198000-memory.dmp
memory/2360-110-0x000000002C180000-0x0000000031198000-memory.dmp
memory/2360-108-0x000000002C180000-0x0000000031198000-memory.dmp
memory/2360-112-0x000000002C180000-0x0000000031198000-memory.dmp
memory/2360-113-0x000000002C180000-0x0000000031198000-memory.dmp
memory/2360-111-0x000000002C180000-0x0000000031198000-memory.dmp
memory/2360-114-0x000000002C180000-0x0000000031198000-memory.dmp
memory/2360-115-0x000000002C180000-0x0000000031198000-memory.dmp
memory/2360-117-0x00007FFD08A90000-0x00007FFD09434000-memory.dmp
memory/2360-116-0x000000002C180000-0x0000000031198000-memory.dmp
memory/2360-124-0x00007FFD08A90000-0x00007FFD09434000-memory.dmp
memory/2360-119-0x000000002C180000-0x0000000031198000-memory.dmp
memory/2360-120-0x000000002C180000-0x0000000031198000-memory.dmp
memory/2360-121-0x000000002C180000-0x0000000031198000-memory.dmp
memory/2360-125-0x000000002C180000-0x0000000031198000-memory.dmp
memory/2360-118-0x000000002C180000-0x0000000031198000-memory.dmp
memory/2360-126-0x000000002C180000-0x0000000031198000-memory.dmp
memory/2360-127-0x000000002C180000-0x0000000031198000-memory.dmp
memory/2360-128-0x000000002C180000-0x0000000031198000-memory.dmp
memory/2360-130-0x000000002C180000-0x0000000031198000-memory.dmp
memory/2360-129-0x000000002C180000-0x0000000031198000-memory.dmp
memory/2360-132-0x000000002C180000-0x0000000031198000-memory.dmp
memory/2360-131-0x000000002C180000-0x0000000031198000-memory.dmp
memory/2360-133-0x000000002C180000-0x0000000031198000-memory.dmp
memory/2360-140-0x000000002C180000-0x0000000031198000-memory.dmp
memory/2360-183-0x00000000006C0000-0x00000000006E2000-memory.dmp
memory/2360-196-0x00000000008A0000-0x00000000008AC000-memory.dmp
memory/2360-197-0x000000001D1F0000-0x000000001D20C000-memory.dmp
memory/2360-198-0x000000001D240000-0x000000001D26C000-memory.dmp
memory/2360-199-0x000000001D2B0000-0x000000001D2EC000-memory.dmp
memory/2360-205-0x00007FFD08A90000-0x00007FFD09434000-memory.dmp
memory/2360-215-0x0000000020990000-0x0000000020BA2000-memory.dmp
memory/2360-216-0x0000000020F00000-0x000000002124A000-memory.dmp
memory/2360-217-0x0000000020BB0000-0x0000000020D8C000-memory.dmp
memory/2360-221-0x0000000021250000-0x000000002146E000-memory.dmp
memory/2360-222-0x00000000215E0000-0x00000000216E0000-memory.dmp
memory/2360-223-0x0000000020780000-0x000000002078A000-memory.dmp
memory/2360-224-0x00000000208C0000-0x00000000208E6000-memory.dmp
memory/2360-225-0x0000000020790000-0x0000000020798000-memory.dmp
memory/2360-226-0x00000000208F0000-0x0000000020906000-memory.dmp
memory/2360-227-0x0000000020910000-0x000000002091A000-memory.dmp
memory/2360-228-0x00000000207A0000-0x00000000207AA000-memory.dmp
memory/2360-229-0x0000000020930000-0x0000000020938000-memory.dmp
memory/2360-230-0x0000000020940000-0x000000002095E000-memory.dmp
memory/2360-231-0x0000000020960000-0x0000000020972000-memory.dmp
memory/2360-232-0x0000000020770000-0x0000000020776000-memory.dmp
memory/2360-233-0x0000000020920000-0x0000000020926000-memory.dmp
memory/2360-238-0x00007FFD08A90000-0x00007FFD09434000-memory.dmp