Analysis
- max time kernel
150s - max time network
134s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
13/08/2026, 09:29
General
- Target 309420ca35a2dd7f5b342a55d25d52a85a25bf312be66ed75d00f5a425d9c95e.exe
- Size 8.3MB
- Sample260813-lgap6sen5w
- SHA256 309420ca35a2dd7f5b342a55d25d52a85a25bf312be66ed75d00f5a425d9c95e
Malware Config
Signatures
- Loads dropped DLL 21 IoCs
- UPX packed file 64 IoCs
Detects executables packed with UPX/modified UPX open source packer.
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\309420ca35a2dd7f5b342a55d25d52a85a25bf312be66ed75d00f5a425d9c95e.exe"C:\Users\Admin\AppData\Local\Temp\309420ca35a2dd7f5b342a55d25d52a85a25bf312be66ed75d00f5a425d9c95e.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\309420ca35a2dd7f5b342a55d25d52a85a25bf312be66ed75d00f5a425d9c95e.exe"C:\Users\Admin\AppData\Local\Temp\309420ca35a2dd7f5b342a55d25d52a85a25bf312be66ed75d00f5a425d9c95e.exe"2⤵
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
VCRUNTIME140.dll
_asyncio.pyd
_bz2.pyd
_ctypes.pyd
_hashlib.pyd
_lzma.pyd
_overlapped.pyd
_queue.pyd
_socket.pyd
_ssl.pyd
_uuid.pyd
base_library.zip
libcrypto-1_1.dll
libffi-7.dll
libssl-1_1.dll
_psutil_windows.pyd
python3.DLL
python39.dll
select.pyd
speedups.pyd
ucrtbase.dll
unicodedata.pyd
memory/2848-150-0x00007FFF0AFC0000-0x00007FFF0B0D8000-memory.dmp
memory/2848-162-0x00007FFF000A0000-0x00007FFF0052F000-memory.dmp
memory/2848-126-0x00007FFF13270000-0x00007FFF13327000-memory.dmp
memory/2848-133-0x00007FFF14DC0000-0x00007FFF14DD2000-memory.dmp
memory/2848-130-0x00007FFF000A0000-0x00007FFF0052F000-memory.dmp
memory/2848-124-0x00007FFEFFD20000-0x00007FFF00097000-memory.dmp
memory/2848-138-0x00007FFF13540000-0x00007FFF1355C000-memory.dmp
memory/2848-137-0x00007FFF1A780000-0x00007FFF1A7A6000-memory.dmp
memory/2848-122-0x00007FFF18B60000-0x00007FFF18B8D000-memory.dmp
memory/2848-118-0x00007FFF1A730000-0x00007FFF1A73D000-memory.dmp
memory/2848-141-0x00007FFF0BCE0000-0x00007FFF0BD0E000-memory.dmp
memory/2848-115-0x00007FFF1A740000-0x00007FFF1A74E000-memory.dmp
memory/2848-145-0x00007FFF1A720000-0x00007FFF1A72B000-memory.dmp
memory/2848-111-0x00007FFF1A750000-0x00007FFF1A76A000-memory.dmp
memory/2848-147-0x00007FFF13510000-0x00007FFF1351D000-memory.dmp
memory/2848-108-0x00007FFF1A770000-0x00007FFF1A77F000-memory.dmp
memory/2848-144-0x00007FFF1A750000-0x00007FFF1A76A000-memory.dmp
memory/2848-106-0x00007FFF1A780000-0x00007FFF1A7A6000-memory.dmp
memory/2848-156-0x00007FFF12630000-0x00007FFF12646000-memory.dmp
memory/2848-98-0x00007FFF000A0000-0x00007FFF0052F000-memory.dmp
memory/2848-154-0x00007FFF18B60000-0x00007FFF18B8D000-memory.dmp
memory/2848-159-0x00007FFF13270000-0x00007FFF13327000-memory.dmp
memory/2848-158-0x00007FFF0AFA0000-0x00007FFF0AFB8000-memory.dmp
memory/2848-157-0x00007FFEFFD20000-0x00007FFF00097000-memory.dmp
memory/2848-160-0x00007FFF16F10000-0x00007FFF16F26000-memory.dmp
memory/2848-161-0x00007FFF14DC0000-0x00007FFF14DD2000-memory.dmp
memory/2848-163-0x00007FFF1A780000-0x00007FFF1A7A6000-memory.dmp
memory/2848-180-0x00007FFF0AFC0000-0x00007FFF0B0D8000-memory.dmp
memory/2848-171-0x00007FFF16F10000-0x00007FFF16F26000-memory.dmp
memory/2848-131-0x00007FFF16F10000-0x00007FFF16F26000-memory.dmp
memory/2848-168-0x00007FFF18B60000-0x00007FFF18B8D000-memory.dmp
memory/2848-190-0x00007FFF16F10000-0x00007FFF16F26000-memory.dmp
memory/2848-181-0x00007FFF000A0000-0x00007FFF0052F000-memory.dmp
memory/2848-199-0x00007FFF000A0000-0x00007FFF0052F000-memory.dmp
memory/2848-208-0x00007FFF16F10000-0x00007FFF16F26000-memory.dmp
memory/2848-226-0x00007FFF16F10000-0x00007FFF16F26000-memory.dmp
memory/2848-217-0x00007FFF000A0000-0x00007FFF0052F000-memory.dmp
memory/2848-235-0x00007FFF000A0000-0x00007FFF0052F000-memory.dmp
memory/2848-244-0x00007FFF16F10000-0x00007FFF16F26000-memory.dmp
memory/2848-253-0x00007FFF000A0000-0x00007FFF0052F000-memory.dmp
memory/2848-262-0x00007FFF16F10000-0x00007FFF16F26000-memory.dmp
memory/2848-280-0x00007FFF16F10000-0x00007FFF16F26000-memory.dmp
memory/2848-271-0x00007FFF000A0000-0x00007FFF0052F000-memory.dmp
memory/2848-298-0x00007FFF16F10000-0x00007FFF16F26000-memory.dmp
memory/2848-289-0x00007FFF000A0000-0x00007FFF0052F000-memory.dmp
memory/2848-307-0x00007FFF000A0000-0x00007FFF0052F000-memory.dmp
memory/2848-316-0x00007FFF16F10000-0x00007FFF16F26000-memory.dmp
memory/2848-334-0x00007FFF16F10000-0x00007FFF16F26000-memory.dmp
memory/2848-325-0x00007FFF000A0000-0x00007FFF0052F000-memory.dmp
memory/2848-343-0x00007FFF000A0000-0x00007FFF0052F000-memory.dmp
memory/2848-352-0x00007FFF16F10000-0x00007FFF16F26000-memory.dmp
memory/2848-370-0x00007FFF16F10000-0x00007FFF16F26000-memory.dmp
memory/2848-361-0x00007FFF000A0000-0x00007FFF0052F000-memory.dmp
memory/2848-388-0x00007FFF16F10000-0x00007FFF16F26000-memory.dmp
memory/2848-379-0x00007FFF000A0000-0x00007FFF0052F000-memory.dmp
memory/2848-397-0x00007FFF000A0000-0x00007FFF0052F000-memory.dmp
memory/2848-406-0x00007FFF16F10000-0x00007FFF16F26000-memory.dmp