Analysis
- max time kernel
148s - max time network
149s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/08/2026, 13:29
General
- Target 7f0010cb0fa3f2a8402ee436b7fa464240cf77827d1e71197ef8e24e1cb17418.exe
- Size 415KB
- Sample260810-qrfrdsgd62
- SHA256 7f0010cb0fa3f2a8402ee436b7fa464240cf77827d1e71197ef8e24e1cb17418
Malware Config
Signatures
- Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\7f0010cb0fa3f2a8402ee436b7fa464240cf77827d1e71197ef8e24e1cb17418.exe"C:\Users\Admin\AppData\Local\Temp\7f0010cb0fa3f2a8402ee436b7fa464240cf77827d1e71197ef8e24e1cb17418.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\System32\RuntimeBroker.exe"C:\Windows\System32\RuntimeBroker.exe"2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2592-19-0x000001DFA9A70000-0x000001DFA9A94000-memory.dmp
memory/2592-21-0x000001DFA9A70000-0x000001DFA9A94000-memory.dmp
memory/2592-16-0x000001DFA9A70000-0x000001DFA9A94000-memory.dmp
memory/2592-17-0x000001DFA9A70000-0x000001DFA9A94000-memory.dmp
memory/2592-15-0x000001DFA9A70000-0x000001DFA9A94000-memory.dmp
memory/2592-13-0x000001DFA98B0000-0x000001DFA98CE000-memory.dmp
memory/2592-18-0x000001DFA9A70000-0x000001DFA9A94000-memory.dmp
memory/4680-10-0x0000015B9D590000-0x0000015B9D5D4000-memory.dmp
memory/4680-14-0x0000015B9D590000-0x0000015B9D5D4000-memory.dmp
memory/4680-12-0x00007FFB75570000-0x00007FFB75571000-memory.dmp
memory/4680-2-0x0000015B9D590000-0x0000015B9D5D4000-memory.dmp
memory/4680-9-0x0000015B9D590000-0x0000015B9D5D4000-memory.dmp
memory/4680-0-0x0000015B9D540000-0x0000015B9D543000-memory.dmp
memory/4680-22-0x0000015B9D590000-0x0000015B9D5D4000-memory.dmp