Analysis
- max time kernel
149s - max time network
145s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
11/08/2026, 11:08
General
- Target 790a0f4c415ee0fce3473835aaeb911a63a810d4bcb86904d08018ee674eaf78.exe
- Size 12.6MB
- Sample260811-m8ptvadj2v
- SHA256 790a0f4c415ee0fce3473835aaeb911a63a810d4bcb86904d08018ee674eaf78
Malware Config
Signatures
- Loads dropped DLL 2 IoCs
- UPX packed file 5 IoCs
Detects executables packed with UPX/modified UPX open source packer.
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\790a0f4c415ee0fce3473835aaeb911a63a810d4bcb86904d08018ee674eaf78.exe"C:\Users\Admin\AppData\Local\Temp\790a0f4c415ee0fce3473835aaeb911a63a810d4bcb86904d08018ee674eaf78.exe"1⤵
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
bass.dll
tags.dll
memory/5604-0-0x00007FF7CBD40000-0x00007FF7CE5E6000-memory.dmp
memory/5604-1-0x000001F58C540000-0x000001F58C541000-memory.dmp
memory/5604-7-0x00007FFA96670000-0x00007FFA966CC000-memory.dmp
memory/5604-10-0x000001F58FCF0000-0x000001F58FD12000-memory.dmp
memory/5604-74-0x00007FF7CBD40000-0x00007FF7CE5E6000-memory.dmp
memory/5604-75-0x00007FF7CBD40000-0x00007FF7CE5E6000-memory.dmp
memory/5604-76-0x000001F58C540000-0x000001F58C541000-memory.dmp
memory/5604-77-0x000001F58FCF0000-0x000001F58FD12000-memory.dmp
memory/5604-78-0x00007FF7CBD40000-0x00007FF7CE5E6000-memory.dmp
memory/5604-88-0x00007FF7CBD40000-0x00007FF7CE5E6000-memory.dmp