Analysis
- geolocation tags
- max time kernel
119s - max time network
122s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
11/08/2026, 02:47
General
- Target smss.exe
- Size 202KB
- Sample260811-c91bvstfpe
- SHA256 cd6351bc65f2e8bd231436683344f8f4f5f7120618e4fd64985f0bbadf75b309
Malware Config
Signatures
- Checks whether UAC is enabled 1 TTPs 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\smss.exe"C:\Users\Admin\AppData\Local\Temp\smss.exe"1⤵
- Checks whether UAC is enabled
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1240-0-0x00007FFCEA9AA000-0x00007FFCEA9AB000-memory.dmp
memory/1240-2-0x000000001E4D0000-0x000000001E99E000-memory.dmp
memory/1240-1-0x00007FFCEA6B0000-0x00007FFCEB0E8000-memory.dmp
memory/1240-3-0x000000001CBE0000-0x000000001CC7C000-memory.dmp
memory/1240-4-0x00007FFCEA6B0000-0x00007FFCEB0E8000-memory.dmp
memory/1240-5-0x0000000001FF0000-0x0000000001FF8000-memory.dmp
memory/1240-6-0x00007FFCEA6B0000-0x00007FFCEB0E8000-memory.dmp
memory/1240-7-0x00007FFCEA6B0000-0x00007FFCEB0E8000-memory.dmp
memory/1240-8-0x00007FFCEA6B0000-0x00007FFCEB0E8000-memory.dmp
memory/1240-9-0x00007FFCEA6B0000-0x00007FFCEB0E8000-memory.dmp
memory/1240-10-0x000000001CE60000-0x000000001CEC2000-memory.dmp
memory/1240-12-0x00007FFCEA6B0000-0x00007FFCEB0E8000-memory.dmp
memory/1240-11-0x00007FFCEA6B0000-0x00007FFCEB0E8000-memory.dmp
memory/1240-13-0x00007FFCEA6B0000-0x00007FFCEB0E8000-memory.dmp
memory/1240-14-0x00007FFCEA6B0000-0x00007FFCEB0E8000-memory.dmp
memory/1240-15-0x00007FFCEA6B0000-0x00007FFCEB0E8000-memory.dmp
memory/1240-16-0x00007FFCEA6B0000-0x00007FFCEB0E8000-memory.dmp
memory/1240-17-0x000000001CFE0000-0x000000001CFEA000-memory.dmp
memory/1240-18-0x000000001EE00000-0x000000001EE14000-memory.dmp
memory/1240-21-0x000000001EEC0000-0x000000001EECE000-memory.dmp
memory/1240-20-0x000000001EFA0000-0x000000001EFC8000-memory.dmp
memory/1240-19-0x000000001EEF0000-0x000000001EF96000-memory.dmp
memory/1240-22-0x00007FFCEA9AA000-0x00007FFCEA9AB000-memory.dmp
memory/1240-23-0x00007FFCEA6B0000-0x00007FFCEB0E8000-memory.dmp
memory/1240-24-0x00007FFCEA6B0000-0x00007FFCEB0E8000-memory.dmp
memory/1240-25-0x00007FFCEA6B0000-0x00007FFCEB0E8000-memory.dmp