Analysis
- max time kernel
150s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
13/08/2026, 09:29
General
- Target 309420ca35a2dd7f5b342a55d25d52a85a25bf312be66ed75d00f5a425d9c95e.exe
- Size 8.3MB
- Sample260813-lgap6sen5w
- SHA256 309420ca35a2dd7f5b342a55d25d52a85a25bf312be66ed75d00f5a425d9c95e
Malware Config
Signatures
- Loads dropped DLL 22 IoCs
- UPX packed file 64 IoCs
Detects executables packed with UPX/modified UPX open source packer.
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\309420ca35a2dd7f5b342a55d25d52a85a25bf312be66ed75d00f5a425d9c95e.exe"C:\Users\Admin\AppData\Local\Temp\309420ca35a2dd7f5b342a55d25d52a85a25bf312be66ed75d00f5a425d9c95e.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\309420ca35a2dd7f5b342a55d25d52a85a25bf312be66ed75d00f5a425d9c95e.exe"C:\Users\Admin\AppData\Local\Temp\309420ca35a2dd7f5b342a55d25d52a85a25bf312be66ed75d00f5a425d9c95e.exe"2⤵
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
VCRUNTIME140.dll
_asyncio.pyd
_bz2.pyd
_ctypes.pyd
_hashlib.pyd
_lzma.pyd
_overlapped.pyd
_queue.pyd
_socket.pyd
_ssl.pyd
_uuid.pyd
base_library.zip
libcrypto-1_1.dll
libffi-7.dll
libssl-1_1.dll
_psutil_windows.pyd
python3.dll
python39.dll
select.pyd
speedups.pyd
ucrtbase.dll
unicodedata.pyd
memory/3936-112-0x00007FFF6A7B0000-0x00007FFF6A7CA000-memory.dmp
memory/3936-164-0x00007FFF59270000-0x00007FFF596FF000-memory.dmp
memory/3936-143-0x00007FFF666D0000-0x00007FFF666EC000-memory.dmp
memory/3936-142-0x00007FFF6A250000-0x00007FFF6A262000-memory.dmp
memory/3936-141-0x0000027910F20000-0x0000027911297000-memory.dmp
memory/3936-145-0x00007FFF6A370000-0x00007FFF6A37B000-memory.dmp
memory/3936-146-0x00007FFF6A2D0000-0x00007FFF6A2DD000-memory.dmp
memory/3936-147-0x00007FFF65B00000-0x00007FFF65C18000-memory.dmp
memory/3936-149-0x00007FFF58EF0000-0x00007FFF59267000-memory.dmp
memory/3936-150-0x00007FFF6A2E0000-0x00007FFF6A2F6000-memory.dmp
memory/3936-121-0x00007FFF6A3A0000-0x00007FFF6A3CD000-memory.dmp
memory/3936-154-0x00007FFF59270000-0x00007FFF596FF000-memory.dmp
memory/3936-155-0x00007FFF66520000-0x00007FFF66536000-memory.dmp
memory/3936-118-0x00007FFF6A7A0000-0x00007FFF6A7AD000-memory.dmp
memory/3936-115-0x00007FFF6B100000-0x00007FFF6B10E000-memory.dmp
memory/3936-156-0x00007FFF66500000-0x00007FFF66518000-memory.dmp
memory/3936-126-0x00007FFF66260000-0x00007FFF66317000-memory.dmp
memory/3936-108-0x00007FFF6B110000-0x00007FFF6B11F000-memory.dmp
memory/3936-106-0x00007FFF6B440000-0x00007FFF6B466000-memory.dmp
memory/3936-99-0x00007FFF59270000-0x00007FFF596FF000-memory.dmp
memory/3936-157-0x00007FFF6B440000-0x00007FFF6B466000-memory.dmp
memory/3936-158-0x00007FFF6A7B0000-0x00007FFF6A7CA000-memory.dmp
memory/3936-159-0x00007FFF6A3A0000-0x00007FFF6A3CD000-memory.dmp
memory/3936-160-0x0000027910F20000-0x0000027911297000-memory.dmp
memory/3936-161-0x00007FFF66260000-0x00007FFF66317000-memory.dmp
memory/3936-162-0x00007FFF6A250000-0x00007FFF6A262000-memory.dmp
memory/3936-163-0x00007FFF6A2E0000-0x00007FFF6A2F6000-memory.dmp
memory/3936-144-0x00007FFF66540000-0x00007FFF6656E000-memory.dmp
memory/3936-173-0x00007FFF6A2E0000-0x00007FFF6A2F6000-memory.dmp
memory/3936-182-0x00007FFF59270000-0x00007FFF596FF000-memory.dmp
memory/3936-191-0x00007FFF6A2E0000-0x00007FFF6A2F6000-memory.dmp
memory/3936-200-0x00007FFF59270000-0x00007FFF596FF000-memory.dmp
memory/3936-209-0x00007FFF6A2E0000-0x00007FFF6A2F6000-memory.dmp
memory/3936-218-0x00007FFF59270000-0x00007FFF596FF000-memory.dmp
memory/3936-227-0x00007FFF6A2E0000-0x00007FFF6A2F6000-memory.dmp
memory/3936-236-0x00007FFF59270000-0x00007FFF596FF000-memory.dmp
memory/3936-245-0x00007FFF6A2E0000-0x00007FFF6A2F6000-memory.dmp
memory/3936-254-0x00007FFF59270000-0x00007FFF596FF000-memory.dmp
memory/3936-263-0x00007FFF6A2E0000-0x00007FFF6A2F6000-memory.dmp
memory/3936-281-0x00007FFF6A2E0000-0x00007FFF6A2F6000-memory.dmp
memory/3936-272-0x00007FFF59270000-0x00007FFF596FF000-memory.dmp
memory/3936-290-0x00007FFF59270000-0x00007FFF596FF000-memory.dmp
memory/3936-299-0x00007FFF6A2E0000-0x00007FFF6A2F6000-memory.dmp
memory/3936-317-0x00007FFF6A2E0000-0x00007FFF6A2F6000-memory.dmp
memory/3936-308-0x00007FFF59270000-0x00007FFF596FF000-memory.dmp
memory/3936-335-0x00007FFF6A2E0000-0x00007FFF6A2F6000-memory.dmp
memory/3936-326-0x00007FFF59270000-0x00007FFF596FF000-memory.dmp
memory/3936-344-0x00007FFF59270000-0x00007FFF596FF000-memory.dmp
memory/3936-353-0x00007FFF6A2E0000-0x00007FFF6A2F6000-memory.dmp
memory/3936-362-0x00007FFF59270000-0x00007FFF596FF000-memory.dmp
memory/3936-371-0x00007FFF6A2E0000-0x00007FFF6A2F6000-memory.dmp
memory/3936-389-0x00007FFF6A2E0000-0x00007FFF6A2F6000-memory.dmp
memory/3936-380-0x00007FFF59270000-0x00007FFF596FF000-memory.dmp
memory/3936-407-0x00007FFF6A2E0000-0x00007FFF6A2F6000-memory.dmp
memory/3936-398-0x00007FFF59270000-0x00007FFF596FF000-memory.dmp