Analysis
- user interaction
yes - max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
12/08/2026, 04:00
General
- Target dwq.exe
- Size 12.6MB
- Sample260812-eks8csak2t
- SHA256 2b7a84fcc15d8f98b322867c78cc5e79768e764b19eccb91433395d89fbe7507
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\dwq.exe"C:\Users\Admin\AppData\Local\Temp\dwq.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4884-1-0x00007FFD1F700000-0x00007FFD1F702000-memory.dmp
memory/4884-0-0x00007FFD1F6F0000-0x00007FFD1F6F2000-memory.dmp
memory/4884-5-0x00007FFD1F740000-0x00007FFD1F742000-memory.dmp
memory/4884-4-0x00007FFD1F730000-0x00007FFD1F732000-memory.dmp
memory/4884-2-0x00007FFD1F710000-0x00007FFD1F712000-memory.dmp
memory/4884-10-0x00007FFD1F780000-0x00007FFD1F782000-memory.dmp
memory/4884-9-0x00007FFD1F770000-0x00007FFD1F772000-memory.dmp
memory/4884-8-0x00007FF6E941F000-0x00007FF6EA517000-memory.dmp
memory/4884-7-0x00007FFD1F760000-0x00007FFD1F762000-memory.dmp
memory/4884-6-0x00007FFD1F750000-0x00007FFD1F752000-memory.dmp
memory/4884-3-0x00007FFD1F720000-0x00007FFD1F722000-memory.dmp
memory/4884-13-0x00007FFD1F7B0000-0x00007FFD1F7B2000-memory.dmp
memory/4884-19-0x000001F24DAD0000-0x000001F24DFDD000-memory.dmp
memory/4884-18-0x00007FFD1F800000-0x00007FFD1F802000-memory.dmp
memory/4884-17-0x00007FFD1F7F0000-0x00007FFD1F7F2000-memory.dmp
memory/4884-15-0x00007FFD1F7D0000-0x00007FFD1F7D2000-memory.dmp
memory/4884-16-0x00007FFD1F7E0000-0x00007FFD1F7E2000-memory.dmp
memory/4884-14-0x00007FFD1F7C0000-0x00007FFD1F7C2000-memory.dmp
memory/4884-12-0x00007FFD1F7A0000-0x00007FFD1F7A2000-memory.dmp
memory/4884-11-0x00007FFD1F790000-0x00007FFD1F792000-memory.dmp
memory/4884-25-0x00007FF6E93E0000-0x00007FF6EB1A9000-memory.dmp
memory/4884-26-0x00007FF6E941F000-0x00007FF6EA517000-memory.dmp