Analysis
- max time kernel
150s - max time network
135s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
09/08/2026, 12:53
General
- Target SpeedAutoClicker.exe
- Size 2.1MB
- Sample260809-p4ngbsfk3v
- SHA256 6bc32e935a514da31e6ed5559252c36d82fd64b1e6403748b0ba86598ef20071
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious behavior: EnumeratesProcesses 2 IoCs
- Suspicious use of AdjustPrivilegeToken 45 IoCs
- Suspicious use of FindShellTrayWindow 1 IoCs
- Suspicious use of SendNotifyMessage 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\SpeedAutoClicker.exe"C:\Users\Admin\AppData\Local\Temp\SpeedAutoClicker.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
ac.config
memory/4572-8-0x0000000005740000-0x000000000575A000-memory.dmp
memory/4572-12-0x0000000006820000-0x000000000682A000-memory.dmp
memory/4572-3-0x0000000003020000-0x000000000303A000-memory.dmp
memory/4572-4-0x0000000005760000-0x00000000057F2000-memory.dmp
memory/4572-5-0x0000000005630000-0x0000000005642000-memory.dmp
memory/4572-6-0x0000000074200000-0x00000000749BC000-memory.dmp
memory/4572-7-0x00000000056C0000-0x000000000570A000-memory.dmp
memory/4572-0-0x0000000074212000-0x0000000074213000-memory.dmp
memory/4572-2-0x0000000005DE0000-0x000000000639A000-memory.dmp
memory/4572-13-0x0000000074200000-0x00000000749BC000-memory.dmp
memory/4572-9-0x0000000005800000-0x0000000005808000-memory.dmp
memory/4572-14-0x0000000074200000-0x00000000749BC000-memory.dmp
memory/4572-17-0x000000000BB20000-0x000000000BCE2000-memory.dmp
memory/4572-18-0x000000000C220000-0x000000000C74C000-memory.dmp
memory/4572-21-0x0000000074212000-0x0000000074213000-memory.dmp
memory/4572-22-0x0000000074200000-0x00000000749BC000-memory.dmp
memory/4572-1-0x0000000000A90000-0x0000000000CB6000-memory.dmp