Analysis
- user interaction
yes - max time kernel
150s - max time network
130s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
10/08/2026, 06:19
General
- Target niggerware.exe
- Size 22.4MB
- Sample260810-g3ffbssfjd
- SHA256 d5ee3ae7f61813025efa9df2b09c519f81e4b75a00c6d8b249536d4d3f5917bd
Malware Config
Signatures
- Identifies VirtualBox via ACPI registry values (likely anti-VM) 2 TTPs 1 IoCs
- Checks BIOS information in registry 2 TTPs 2 IoCs
BIOS information is often read in order to detect sandboxing environments.
- Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Checks whether UAC is enabled 1 TTPs 1 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
- Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\niggerware.exe"C:\Users\Admin\AppData\Local\Temp\niggerware.exe"1⤵
- Identifies VirtualBox via ACPI registry values (likely anti-VM)
- Checks BIOS information in registry
- Checks whether UAC is enabled
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\cmd.exe"C:\Windows\SysWOW64\cmd.exe"2⤵
-
-
C:\Windows\SysWOW64\cmd.exe"C:\Windows\SysWOW64\cmd.exe"2⤵
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2296-1-0x0000000140000000-0x000000014245E000-memory.dmp
memory/2296-2-0x0000000140000000-0x000000014245E000-memory.dmp
memory/2296-0-0x0000000140000000-0x000000014245E000-memory.dmp
memory/2296-3-0x0000000140000000-0x000000014245E000-memory.dmp
memory/2296-4-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-531-0x00000000046A0000-0x000000000563E000-memory.dmp
memory/2296-621-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-620-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-619-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-618-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-617-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-616-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-615-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-614-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-613-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-612-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-611-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-610-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-609-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-608-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-607-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-606-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-605-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-604-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-603-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-602-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-601-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-600-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-599-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-598-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-597-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-596-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-595-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-594-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-593-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-592-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-591-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-590-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-589-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-588-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-587-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-586-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-585-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-584-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-583-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-582-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-581-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-580-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-579-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-578-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-577-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-576-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-575-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-574-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-573-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-572-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-571-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-570-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-569-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-568-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-567-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-566-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-565-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-564-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-563-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-562-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-561-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-560-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-559-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-558-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-557-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-556-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-555-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-554-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-553-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-552-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-551-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-550-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-549-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-548-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-547-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-546-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-545-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-544-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-543-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-542-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-541-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-540-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-539-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-538-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-537-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-536-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-535-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-534-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-533-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-532-0x0000000140000000-0x000000014245E000-memory.dmp
memory/2296-622-0x0000000140000000-0x000000014245E000-memory.dmp
memory/2296-628-0x00000000046A0000-0x000000000563E000-memory.dmp
memory/2296-630-0x00000000046A0000-0x000000000563E000-memory.dmp
memory/2296-632-0x00000000046A0000-0x000000000563E000-memory.dmp
memory/2296-631-0x00000000046A0000-0x000000000563E000-memory.dmp
memory/2296-627-0x00000000046A0000-0x000000000563E000-memory.dmp
memory/2296-624-0x00000000046A0000-0x000000000563E000-memory.dmp
memory/2296-629-0x00000000046A0000-0x000000000563E000-memory.dmp
memory/2296-818-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2296-817-0x00000000046A0000-0x000000000563E000-memory.dmp
memory/2296-819-0x0000000140000000-0x000000014245E000-memory.dmp
memory/2296-820-0x0000000140000000-0x000000014245E000-memory.dmp