Analysis
- max time kernel
148s - max time network
115s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
14/08/2026, 00:00
General
- Target Installer.exe
- Size 246KB
- Sample260814-aaa7ks1cnc
- SHA256 3d2b22b6bc51e0918263f4420e6bdf7d982d961b54176c470cac11841d1c9b33
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Installer.exe"C:\Users\Admin\AppData\Local\Temp\Installer.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3416-0-0x00000274180C0000-0x00000274180FE000-memory.dmp
memory/3416-2-0x0000027418570000-0x000002741858A000-memory.dmp
memory/3416-1-0x00007FFBCBD6F000-0x00007FFBCBD70000-memory.dmp
memory/3416-3-0x0000027432850000-0x00000274329AA000-memory.dmp
memory/3416-4-0x00007FFBCBBE0000-0x00007FFBCC584000-memory.dmp
memory/3416-5-0x00007FFBCBBE0000-0x00007FFBCC584000-memory.dmp
memory/3416-6-0x00007FFBCBBE0000-0x00007FFBCC584000-memory.dmp
memory/3416-7-0x00007FFBCBBE0000-0x00007FFBCC584000-memory.dmp
memory/3416-8-0x00007FFBCBBE0000-0x00007FFBCC584000-memory.dmp
memory/3416-9-0x0000027419F20000-0x0000027419F50000-memory.dmp
memory/3416-10-0x00007FFBCBBE0000-0x00007FFBCC584000-memory.dmp
memory/3416-11-0x00007FFBCBBE0000-0x00007FFBCC584000-memory.dmp
memory/3416-12-0x00007FFBCBBE0000-0x00007FFBCC584000-memory.dmp
memory/3416-13-0x00007FFBCBBE0000-0x00007FFBCC584000-memory.dmp
memory/3416-14-0x00007FFBCBBE0000-0x00007FFBCC584000-memory.dmp
memory/3416-15-0x00007FFBCBBE0000-0x00007FFBCC584000-memory.dmp
memory/3416-16-0x00000274337C0000-0x00000274345C4000-memory.dmp
memory/3416-17-0x00007FFBCBBE0000-0x00007FFBCC584000-memory.dmp
memory/3416-18-0x00000274329B0000-0x0000027432D1C000-memory.dmp