Analysis
- max time kernel
148s - max time network
132s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
15/08/2026, 00:04
General
- Target appinst_up001.exe
- Size 36.8MB
- Sample260815-acrx4svybx
- SHA256 8e89377ae35967e544edea7bff41a4ef5669bff01860f315383245de98b51dd8
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
- Loads dropped DLL 1 IoCs
- Suspicious behavior: EnumeratesProcesses 38 IoCs
- Suspicious behavior: LoadsDriver 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\appinst_up001.exe"C:\Users\Admin\AppData\Local\Temp\appinst_up001.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
-
C:\Users\Public\r0Vrgl\8TSkDp.exe"C:\Users\Public\r0Vrgl\8TSkDp.exe"1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
8TSkDp.exe
UxEnhance64.dll
adoresd.dat
msadox.tb
memory/1752-1-0x00000000044B0000-0x00000000044BE000-memory.dmp
memory/1752-2-0x00000000044C0000-0x00000000044CC000-memory.dmp
memory/1752-504-0x00007FFD306E0000-0x00007FFD306F2000-memory.dmp
memory/1752-525-0x00007FFD306E0000-0x00007FFD306F2000-memory.dmp
memory/1752-524-0x00000000044B0000-0x00000000044BE000-memory.dmp
memory/1752-0-0x00000000044B0000-0x00000000044BE000-memory.dmp
memory/6008-530-0x00007FFD40630000-0x00007FFD40632000-memory.dmp
memory/6008-531-0x00007FFD1DB90000-0x00007FFD1E0AE000-memory.dmp
memory/6008-536-0x00000235BB8C0000-0x00000235BC151000-memory.dmp
memory/6008-538-0x00007FFD40640000-0x00007FFD40642000-memory.dmp
memory/6008-539-0x00000235BB8C0000-0x00000235BC151000-memory.dmp
memory/6008-543-0x00000235BB8C0000-0x00000235BC151000-memory.dmp
memory/6008-545-0x00000235BB8C0000-0x00000235BC151000-memory.dmp
memory/6008-544-0x00000235BB8C0000-0x00000235BC151000-memory.dmp
memory/6008-546-0x00000235BB8C0000-0x00000235BC151000-memory.dmp