Analysis
- max time kernel
150s - max time network
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
14/08/2026, 06:00
General
- Target beb7b0d778dee883735af6fcc0c11ea38d1f5f334f5a22f1b1047f244ba4de2b.exe
- Size 17.2MB
- Sample260814-gqechaff32
- SHA256 beb7b0d778dee883735af6fcc0c11ea38d1f5f334f5a22f1b1047f244ba4de2b
Malware Config
Signatures
- Drops file in System32 directory 1 IoCs
- Suspicious behavior: EnumeratesProcesses 1 IoCs
- Suspicious use of AdjustPrivilegeToken 64 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\beb7b0d778dee883735af6fcc0c11ea38d1f5f334f5a22f1b1047f244ba4de2b.exe"C:\Users\Admin\AppData\Local\Temp\beb7b0d778dee883735af6fcc0c11ea38d1f5f334f5a22f1b1047f244ba4de2b.exe"1⤵
- Drops file in System32 directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3332-0-0x00007FFEBC44F000-0x00007FFEBC450000-memory.dmp
memory/3332-2-0x00007FFEBC2C0000-0x00007FFEBCC64000-memory.dmp
memory/3332-1-0x00000152E82E0000-0x00000152E892A000-memory.dmp
memory/3332-3-0x00000152CD9C0000-0x00000152CD9C8000-memory.dmp
memory/3332-4-0x00000152CD9E0000-0x00000152CD9E8000-memory.dmp
memory/3332-5-0x00000152CD9C0000-0x00000152CD9CA000-memory.dmp
memory/3332-6-0x00000152CDA80000-0x00000152CDA8A000-memory.dmp
memory/3332-7-0x00007FFEBC2C0000-0x00007FFEBCC64000-memory.dmp
memory/3332-8-0x00007FFEBC2C0000-0x00007FFEBCC64000-memory.dmp
memory/3332-9-0x00000152CF090000-0x00000152CF0B2000-memory.dmp
memory/3332-10-0x00007FFEBC2C0000-0x00007FFEBCC64000-memory.dmp
memory/3332-11-0x00007FFEBC2C0000-0x00007FFEBCC64000-memory.dmp
memory/3332-12-0x00007FFEBC2C0000-0x00007FFEBCC64000-memory.dmp
memory/3332-13-0x00007FFEBC2C0000-0x00007FFEBCC64000-memory.dmp
memory/3332-14-0x00007FFEBC2C0000-0x00007FFEBCC64000-memory.dmp
memory/3332-15-0x00007FFEBC2C0000-0x00007FFEBCC64000-memory.dmp
memory/3332-16-0x00007FFEBC2C0000-0x00007FFEBCC64000-memory.dmp
memory/3332-17-0x00007FFEBC2C0000-0x00007FFEBCC64000-memory.dmp
memory/3332-18-0x00007FFEBC2C0000-0x00007FFEBCC64000-memory.dmp
memory/3332-19-0x00007FFEBC2C0000-0x00007FFEBCC64000-memory.dmp
memory/3332-20-0x00007FFEBC2C0000-0x00007FFEBCC64000-memory.dmp
memory/3332-21-0x00007FFEBC2C0000-0x00007FFEBCC64000-memory.dmp
memory/3332-22-0x00007FFEBC2C0000-0x00007FFEBCC64000-memory.dmp
memory/3332-23-0x00007FFEBC2C0000-0x00007FFEBCC64000-memory.dmp
memory/3332-24-0x00007FFEBC2C0000-0x00007FFEBCC64000-memory.dmp
memory/3332-27-0x00007FFEBC2C0000-0x00007FFEBCC64000-memory.dmp
memory/3332-29-0x00000152CF280000-0x00000152CF332000-memory.dmp
memory/3332-28-0x00000152CF260000-0x00000152CF27E000-memory.dmp
memory/3332-30-0x00000152CF340000-0x00000152CF34A000-memory.dmp
memory/3332-31-0x00007FFEBC2C0000-0x00007FFEBCC64000-memory.dmp
memory/3332-32-0x00007FFEBC2C0000-0x00007FFEBCC64000-memory.dmp
memory/3332-33-0x00007FFEBC2C0000-0x00007FFEBCC64000-memory.dmp
memory/3332-34-0x00007FFEBC2C0000-0x00007FFEBCC64000-memory.dmp
memory/3332-35-0x00007FFEBC2C0000-0x00007FFEBCC64000-memory.dmp
memory/3332-38-0x00007FFEBC2C0000-0x00007FFEBCC64000-memory.dmp
memory/3332-47-0x00007FFEBC2C0000-0x00007FFEBCC64000-memory.dmp
memory/3332-48-0x00007FFEBC2C0000-0x00007FFEBCC64000-memory.dmp
memory/3332-49-0x00007FFEBC2C0000-0x00007FFEBCC64000-memory.dmp