Analysis
- max time kernel
150s - max time network
146s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
16/08/2026, 06:26
General
- Target delta.exe
- Size 95KB
- Sample260816-g7lg5sstdx
- SHA256 8cee3e99c37c09beb675afa0bfa9eea1636a7ee63898f8b089d6b2d784ffae52
Malware Config
Signatures
- Modifies registry class 2 IoCs
- Suspicious behavior: EnumeratesProcesses 2 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of AdjustPrivilegeToken 32 IoCs
- Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\explorer.exeexplorer.exe /LOADSAVEDWINDOWS1⤵
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
-
C:\Users\Admin\AppData\Local\Temp\delta.exe"C:\Users\Admin\AppData\Local\Temp\delta.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/752-40-0x0000000391560000-0x0000000391760000-memory.dmp
memory/752-36-0x0000000391560000-0x0000000391760000-memory.dmp
memory/752-50-0x0000000391560000-0x0000000391760000-memory.dmp
memory/752-29-0x0000000391560000-0x0000000391760000-memory.dmp
memory/752-48-0x0000000391560000-0x0000000391760000-memory.dmp
memory/752-47-0x0000000391560000-0x0000000391760000-memory.dmp
memory/752-37-0x0000000391560000-0x0000000391760000-memory.dmp
memory/752-35-0x0000000391560000-0x0000000391760000-memory.dmp
memory/752-34-0x0000000391560000-0x0000000391760000-memory.dmp
memory/752-33-0x0000000391560000-0x0000000391760000-memory.dmp
memory/752-14-0x0000000006540000-0x0000000006783000-memory.dmp
memory/4132-13-0x0000000391560000-0x0000000391760000-memory.dmp
memory/4132-0-0x000002C0715D0000-0x000002C071813000-memory.dmp
memory/4132-16-0x0000000391560000-0x0000000391760000-memory.dmp
memory/4132-32-0x00007FF7D59A0000-0x00007FF7D59BF000-memory.dmp
memory/4132-1-0x0000000391560000-0x0000000391760000-memory.dmp