Analysis
- max time kernel
150s - max time network
112s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
11/08/2026, 03:18
General
- Target IRA LOADER.exe
- Size 452KB
- Sample260811-dtwjeacb95
- SHA256 324d44c131bce68ee911bff022a48aba0311af89869e497b4b5c608207c53adf
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 1 IoCs
- Suspicious use of AdjustPrivilegeToken 22 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\IRA LOADER.exe"C:\Users\Admin\AppData\Local\Temp\IRA LOADER.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2200-1-0x00000000005E0000-0x0000000000658000-memory.dmp
memory/2200-0-0x00007FFCAADAF000-0x00007FFCAADB0000-memory.dmp
memory/2200-4-0x00007FFCAAC20000-0x00007FFCAB5C4000-memory.dmp
memory/2200-6-0x00007FFCAAC20000-0x00007FFCAB5C4000-memory.dmp
memory/2200-5-0x0000000002880000-0x00000000028A2000-memory.dmp
memory/2200-7-0x00007FFCAAC20000-0x00007FFCAB5C4000-memory.dmp
memory/2200-8-0x00007FFCAAC20000-0x00007FFCAB5C4000-memory.dmp
memory/2200-9-0x00007FFCAAC20000-0x00007FFCAB5C4000-memory.dmp
memory/2200-10-0x00007FFCAAC20000-0x00007FFCAB5C4000-memory.dmp
memory/2200-11-0x00007FFCAAC20000-0x00007FFCAB5C4000-memory.dmp
memory/2200-16-0x00007FFCAAC20000-0x00007FFCAB5C4000-memory.dmp
memory/2200-23-0x00007FFCAAC20000-0x00007FFCAB5C4000-memory.dmp
memory/2200-24-0x00007FFCAAC20000-0x00007FFCAB5C4000-memory.dmp
memory/2200-25-0x00007FFCAAC20000-0x00007FFCAB5C4000-memory.dmp
memory/2200-26-0x000000001D680000-0x000000001D842000-memory.dmp
memory/2200-27-0x000000001DD80000-0x000000001E2A8000-memory.dmp
memory/2200-30-0x00007FFCAAC20000-0x00007FFCAB5C4000-memory.dmp
memory/2200-34-0x000000001DB50000-0x000000001DC02000-memory.dmp
memory/2200-35-0x000000001D600000-0x000000001D60A000-memory.dmp
memory/2200-33-0x000000001D5E0000-0x000000001D5FE000-memory.dmp
memory/2200-36-0x000000001D630000-0x000000001D64E000-memory.dmp
memory/2200-37-0x000000001D620000-0x000000001D62A000-memory.dmp
memory/2200-38-0x000000001DD10000-0x000000001DD2C000-memory.dmp
memory/2200-39-0x000000001D650000-0x000000001D658000-memory.dmp
memory/2200-40-0x000000001D660000-0x000000001D666000-memory.dmp
memory/2200-41-0x000000001D670000-0x000000001D67A000-memory.dmp
memory/2200-42-0x000000001DB80000-0x000000001DBAA000-memory.dmp
memory/2200-43-0x000000001DB80000-0x000000001DBA4000-memory.dmp
memory/2200-46-0x00007FFCAAC20000-0x00007FFCAB5C4000-memory.dmp
memory/2200-47-0x000000001DBD0000-0x000000001DBD8000-memory.dmp
memory/2200-48-0x000000001E3B0000-0x000000001E3EE000-memory.dmp
memory/2200-49-0x0000000002930000-0x000000000293E000-memory.dmp
memory/2200-50-0x00007FFCAAC20000-0x00007FFCAB5C4000-memory.dmp
memory/2200-51-0x00007FFCAAC20000-0x00007FFCAB5C4000-memory.dmp
memory/2200-52-0x00007FFCAAC20000-0x00007FFCAB5C4000-memory.dmp
memory/2200-53-0x00007FFCAAC20000-0x00007FFCAB5C4000-memory.dmp
memory/2200-54-0x00007FFCAAC20000-0x00007FFCAB5C4000-memory.dmp
memory/2200-55-0x00007FFCAAC20000-0x00007FFCAB5C4000-memory.dmp
memory/2200-57-0x00007FFCAAC20000-0x00007FFCAB5C4000-memory.dmp
memory/2200-58-0x00007FFCAAC20000-0x00007FFCAB5C4000-memory.dmp
memory/2200-59-0x00007FFCAAC20000-0x00007FFCAB5C4000-memory.dmp