Analysis
- user interaction
yes - max time kernel
149s - max time network
159s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
15/08/2026, 17:31
General
- Target Prowler.exe
- Size 113.8MB
- Sample260815-v3vrxaem9w
- SHA256 c59f6ca53f92de9059dad6d549347bd485ec1d75aa490eaba5b87c4166f6f324
Malware Config
Signatures
- Loads dropped DLL 2 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Prowler.exe"C:\Users\Admin\AppData\Local\Temp\Prowler.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
evb5EC6.tmp
evb5EF6.tmp
memory/2800-26-0x00007FFCF9FD0000-0x00007FFCFA1C5000-memory.dmp
memory/2800-18-0x00007FFCF9FD0000-0x00007FFCFA1C5000-memory.dmp
memory/2800-11-0x0000000010000000-0x0000000010009000-memory.dmp
memory/2800-12-0x00007FFCF9FD0000-0x00007FFCFA1C5000-memory.dmp
memory/2800-3-0x00007FFCFA06D000-0x00007FFCFA06E000-memory.dmp
memory/2800-9-0x00007FFCF9FD0000-0x00007FFCFA1C5000-memory.dmp
memory/2800-4-0x0000000180000000-0x000000018033F000-memory.dmp
memory/2800-14-0x00007FFCF9FD0000-0x00007FFCFA1C5000-memory.dmp
memory/2800-15-0x00007FFCF9FD0000-0x00007FFCFA1C5000-memory.dmp
memory/2800-16-0x00007FFCF9FD0000-0x00007FFCFA1C5000-memory.dmp
memory/2800-13-0x00007FFCF9FD0000-0x00007FFCFA1C5000-memory.dmp
memory/2800-17-0x00007FFCF9FD0000-0x00007FFCFA1C5000-memory.dmp
memory/2800-20-0x00007FFCF9FD0000-0x00007FFCFA1C5000-memory.dmp
memory/2800-19-0x00007FFCF9FD0000-0x00007FFCFA1C5000-memory.dmp
memory/2800-27-0x0000000180000000-0x000000018033F000-memory.dmp
memory/2800-21-0x00007FFCF9FD0000-0x00007FFCFA1C5000-memory.dmp
memory/2800-24-0x00007FFCF9FD0000-0x00007FFCFA1C5000-memory.dmp
memory/2800-23-0x00007FFCF9FD0000-0x00007FFCFA1C5000-memory.dmp
memory/2800-7-0x00007FFCF9FD0000-0x00007FFCFA1C5000-memory.dmp
memory/2800-0-0x0000000140000000-0x000000014068F000-memory.dmp
memory/2800-33-0x00007FFCF9FD0000-0x00007FFCFA1C5000-memory.dmp
memory/2800-22-0x00007FFCF9FD0000-0x00007FFCFA1C5000-memory.dmp
memory/2800-28-0x0000000140000000-0x000000014068F000-memory.dmp
memory/2800-31-0x0000000140000000-0x000000014068F000-memory.dmp
memory/2800-32-0x00007FFCF9FD0000-0x00007FFCFA1C5000-memory.dmp
memory/2800-25-0x00007FFCF9FD0000-0x00007FFCFA1C5000-memory.dmp
memory/2800-34-0x00007FFCF9FD0000-0x00007FFCFA1C5000-memory.dmp
memory/2800-35-0x0000000140000000-0x000000014068F000-memory.dmp
memory/2800-38-0x0000000140000000-0x000000014068F000-memory.dmp
memory/2800-41-0x0000000140000000-0x000000014068F000-memory.dmp
memory/2800-44-0x0000000140000000-0x000000014068F000-memory.dmp
memory/2800-47-0x0000000140000000-0x000000014068F000-memory.dmp
memory/2800-50-0x0000000140000000-0x000000014068F000-memory.dmp
memory/2800-53-0x0000000140000000-0x000000014068F000-memory.dmp
memory/2800-56-0x0000000140000000-0x000000014068F000-memory.dmp
memory/2800-59-0x0000000140000000-0x000000014068F000-memory.dmp
memory/2800-62-0x0000000140000000-0x000000014068F000-memory.dmp
memory/2800-65-0x0000000140000000-0x000000014068F000-memory.dmp
memory/2800-68-0x0000000140000000-0x000000014068F000-memory.dmp
memory/2800-71-0x0000000140000000-0x000000014068F000-memory.dmp