Analysis
- user interaction
yes - max time kernel
337s - max time network
360s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
- submitted
09/08/2026, 16:04
General
- Target TheChoicerVoicer_0-5-1 stable compatibility.exe
- Size 201.6MB
- Sample260809-th1a8a1epc
- SHA256 38cf8ed6821beeb3de8d682060900fe98be4062450a7f8917ce3e845ff3f9011
Malware Config
Signatures
- Modifies registry class 1 IoCs
- Suspicious use of FindShellTrayWindow 1 IoCs
- Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\TheChoicerVoicer_0-5-1 stable compatibility.exe"C:\Users\Admin\AppData\Local\Temp\TheChoicerVoicer_0-5-1 stable compatibility.exe"1⤵
- Modifies registry class
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5092-63-0x00007FF76DEF0000-0x00007FF773D48000-memory.dmp
memory/5092-64-0x00007FF76DEF0000-0x00007FF773D48000-memory.dmp
memory/5092-65-0x00007FF76DEF0000-0x00007FF773D48000-memory.dmp
memory/5092-66-0x00007FF76DEF0000-0x00007FF773D48000-memory.dmp
memory/5092-67-0x00007FF76DEF0000-0x00007FF773D48000-memory.dmp
memory/5092-73-0x00007FF76DEF0000-0x00007FF773D48000-memory.dmp
memory/5092-74-0x00007FF76DEF0000-0x00007FF773D48000-memory.dmp
memory/5092-75-0x00007FF76DEF0000-0x00007FF773D48000-memory.dmp
memory/5092-85-0x00007FF76DEF0000-0x00007FF773D48000-memory.dmp
memory/5092-88-0x00007FF76DEF0000-0x00007FF773D48000-memory.dmp
memory/5092-89-0x00007FF76DEF0000-0x00007FF773D48000-memory.dmp
memory/5092-90-0x00007FF76DEF0000-0x00007FF773D48000-memory.dmp
memory/5092-91-0x00007FF76DEF0000-0x00007FF773D48000-memory.dmp
memory/5092-92-0x00007FF76DEF0000-0x00007FF773D48000-memory.dmp
memory/5092-93-0x00007FF76DEF0000-0x00007FF773D48000-memory.dmp
memory/5092-94-0x00007FF76DEF0000-0x00007FF773D48000-memory.dmp
memory/5092-95-0x00007FF76DEF0000-0x00007FF773D48000-memory.dmp
memory/5092-96-0x00007FF76DEF0000-0x00007FF773D48000-memory.dmp
memory/5092-97-0x00007FF76DEF0000-0x00007FF773D48000-memory.dmp
memory/5092-98-0x00007FF76DEF0000-0x00007FF773D48000-memory.dmp
memory/5092-99-0x00007FF76DEF0000-0x00007FF773D48000-memory.dmp
memory/5092-100-0x00007FF76DEF0000-0x00007FF773D48000-memory.dmp
memory/5092-101-0x00007FF76DEF0000-0x00007FF773D48000-memory.dmp
memory/5092-102-0x00007FF76DEF0000-0x00007FF773D48000-memory.dmp
memory/5092-103-0x00007FF76DEF0000-0x00007FF773D48000-memory.dmp
memory/5092-104-0x00007FF76DEF0000-0x00007FF773D48000-memory.dmp
memory/5092-105-0x00007FF76DEF0000-0x00007FF773D48000-memory.dmp
memory/5092-106-0x00007FF76DEF0000-0x00007FF773D48000-memory.dmp
memory/5092-107-0x00007FF76DEF0000-0x00007FF773D48000-memory.dmp
memory/5092-108-0x00007FF76DEF0000-0x00007FF773D48000-memory.dmp
memory/5092-109-0x00007FF76DEF0000-0x00007FF773D48000-memory.dmp
memory/5092-110-0x00007FF76DEF0000-0x00007FF773D48000-memory.dmp
memory/5092-111-0x00007FF76DEF0000-0x00007FF773D48000-memory.dmp