Analysis
- max time kernel
151s - max time network
160s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
- submitted
14/08/2026, 08:52
General
- Target 3016d6a89c7e72cb95de6beca1904bbd72e7ec3faa3067a310cacfc21866a054.exe
- Size 70.1MB
- Sample260814-kstrraygme
- SHA256 3016d6a89c7e72cb95de6beca1904bbd72e7ec3faa3067a310cacfc21866a054
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 1 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3016d6a89c7e72cb95de6beca1904bbd72e7ec3faa3067a310cacfc21866a054.exe"C:\Users\Admin\AppData\Local\Temp\3016d6a89c7e72cb95de6beca1904bbd72e7ec3faa3067a310cacfc21866a054.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2676-6-0x00000181C21A0000-0x00000181C2E30000-memory.dmp
memory/2676-26-0x00000181C34E0000-0x00000181C3520000-memory.dmp
memory/2676-14-0x00000181C1410000-0x00000181C1430000-memory.dmp
memory/2676-10-0x00000181C3030000-0x00000181C3230000-memory.dmp
memory/2676-30-0x00000181C3470000-0x00000181C3490000-memory.dmp
memory/2676-22-0x00000181C3430000-0x00000181C3450000-memory.dmp
memory/2676-34-0x00000181C35B0000-0x00000181C35D0000-memory.dmp
memory/2676-38-0x00000181C35E0000-0x00000181C3600000-memory.dmp
memory/2676-18-0x00000181C1430000-0x00000181C1460000-memory.dmp
memory/2676-42-0x0000018180000000-0x0000018180050000-memory.dmp
memory/2676-50-0x0000018180170000-0x0000018180180000-memory.dmp
memory/2676-46-0x00000181800E0000-0x0000018180170000-memory.dmp
memory/2676-58-0x0000018180190000-0x00000181801D0000-memory.dmp
memory/2676-63-0x0000018180440000-0x00000181804F0000-memory.dmp
memory/2676-54-0x0000018180270000-0x0000018180300000-memory.dmp