Analysis
- user interaction
yes - max time kernel
149s - max time network
125s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
16/08/2026, 19:53
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ExtremeDumper.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
ExtremeDumper.exe
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
General
- Target ExtremeDumper.exe
- Size 1.7MB
- Sample260816-ymdp8sff28
- SHA256 f407b67a008fc2186329d5feffe830f7eead7a11f3b169d0d90099495edfcf2e
- MD5 58db100b228ff17f83726d4c2738990e
- SHA1 d69bfa9ddb32de1999760e8b3b3236bc8934d66c
- SHA512 e845a62e00fcb8305ab0ceececec73a2d46a490c04370742290398f5e568ba4cf43bc1caa0529405e9ee07c021a05109873271278a8c45eec67ad409dd670f51
- SSDEEP 24576:aOXgZKNbtS8nW+LjE5p8Cu9U2zbwPCDzhClInGWILVk5BkAdtSu9D3Eu:aOXgZKnWsg5VEbwshOgILOcUSu
- TLSH T11885BE07E2E80631E6BB47FC98B6B9429776FC169B71C78F22C5279C0D317845C22B66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 1 IoCs
pid Process 1204 ExtremeDumper.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 1204 ExtremeDumper.exe 1204 ExtremeDumper.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1204 ExtremeDumper.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\Costura\CFA0B0B143E4C50194769B9A2552FFEF\64\extremedumper.loaderhook.dll
- Size 211KB
- SHA256 3577492fff8cd1dfdfae86f74e3d77a1aa672b49d18838355ce2a5bf86363f47
- MD5 2e40ed16499ba8ff681b9bfe8263cef8
- SHA1 f89f7d11dc028bb3fa1437b0d0de1affec35f8a1
- SHA512 2f47d4a9f7ec6a7f7eaf605e571c85ba16b4421df9a15c801502af6488287f9ed6c5e7f3c2b29ae2b4f6169252d9ac9a7b91bc666557fa1501347b7de36493a1
- SSDEEP 3072:pQxAV5T3FRR+qi5mgmaL/GSPXG+Szm0jZAsJjTlT8BkVrDY1XbsC1fxgKTmYmqcJ:pskT3FEvPL/GSe/zdFn5p4kDYm15
- TLSH T1C3242A29B25A48B9DC6681348C138E15B37AF8490721578F079B0BFDEEFB3906D2DB54
- MD5 SHA1 SHA512 SSDEEP TLSH