Analysis

  • user interaction
    yes
  • max time kernel
    149s
  • max time network
    125s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260710-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    16/08/2026, 19:53

General

  • Target
    ExtremeDumper.exe
  • Size 1.7MB
  • Sample260816-ymdp8sff28
  • SHA256 f407b67a008fc2186329d5feffe830f7eead7a11f3b169d0d90099495edfcf2e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ExtremeDumper.exe
    "C:\Users\Admin\AppData\Local\Temp\ExtremeDumper.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: GetForegroundWindowSpam
    PID:1204

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        extremedumper.loaderhook.dll

        • Path C:\Users\Admin\AppData\Local\Temp\Costura\CFA0B0B143E4C50194769B9A2552FFEF\64\extremedumper.loaderhook.dll
        • Size 211KB
        • SHA256 3577492fff8cd1dfdfae86f74e3d77a1aa672b49d18838355ce2a5bf86363f47
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/1204-9-0x000002E2F2800000-0x000002E2F2826000-memory.dmp

        memory/1204-11-0x00007FFC47C70000-0x00007FFC48614000-memory.dmp

        memory/1204-1-0x000002E2F21B0000-0x000002E2F235E000-memory.dmp

        memory/1204-4-0x00007FFC47C70000-0x00007FFC48614000-memory.dmp

        memory/1204-8-0x00007FFC47C70000-0x00007FFC48614000-memory.dmp

        memory/1204-0-0x00007FFC47DFF000-0x00007FFC47E00000-memory.dmp

        memory/1204-10-0x00007FFC47C70000-0x00007FFC48614000-memory.dmp

        memory/1204-3-0x00007FFC47C70000-0x00007FFC48614000-memory.dmp

        memory/1204-12-0x000002E2F40B0000-0x000002E2F40C0000-memory.dmp

        memory/1204-13-0x00007FFC47C70000-0x00007FFC48614000-memory.dmp

        memory/1204-14-0x00007FFC47C70000-0x00007FFC48614000-memory.dmp

        memory/1204-15-0x000002E2F5560000-0x000002E2F572A000-memory.dmp

        memory/1204-16-0x00007FFC47C70000-0x00007FFC48614000-memory.dmp

        memory/1204-17-0x00007FFC47C70000-0x00007FFC48614000-memory.dmp