Analysis
- max time kernel
148s - max time network
143s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
09/08/2026, 12:58
General
- Target client.exe
- Size 9KB
- Sample260809-p7lrxafk9s
- SHA256 1361df434c1ad412796735e6f4972d8e6f612ca7542846acc621a070f81cdb5d
Score
6/10
Malware Config
Signatures
- Adds Run key to start application 2 TTPs 2 IoCs
- Suspicious behavior: EnumeratesProcesses 2 IoCs
- Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\client.exe"C:\Users\Admin\AppData\Local\Temp\client.exe"1⤵
- Adds Run key to start application
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Users\Admin\AppData\Local\Temp\client.exeC:\Users\Admin\AppData\Local\Temp\client.exe1⤵
- Adds Run key to start application
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1248-0-0x0000000000C80000-0x0000000000C88000-memory.dmp
memory/1248-1-0x00007FFC1D85F000-0x00007FFC1D860000-memory.dmp
memory/1248-2-0x00007FFC1D6D0000-0x00007FFC1E074000-memory.dmp
memory/1248-3-0x00007FFC1D6D0000-0x00007FFC1E074000-memory.dmp
memory/1248-4-0x00007FFC1D6D0000-0x00007FFC1E074000-memory.dmp
memory/1248-7-0x00007FFC1D6D0000-0x00007FFC1E074000-memory.dmp
memory/2824-5-0x00007FFC1D6D0000-0x00007FFC1E074000-memory.dmp
memory/2824-6-0x00007FFC1D6D0000-0x00007FFC1E074000-memory.dmp
memory/2824-8-0x00007FFC1D6D0000-0x00007FFC1E074000-memory.dmp