Analysis
- geolocation tags
- user interaction
yes - max time kernel
43s - max time network
42s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
17/08/2026, 04:39
General
- Target resight-v1.7.exe
- Size 16.9MB
- Sample260817-e9199she22
- SHA256 5bb6cb2d3978cb304174b65ee58f7ce0d6383d3b957facc505b6a2f13a4fd1e6
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
- Suspicious behavior: EnumeratesProcesses 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\resight-v1.7.exe"C:\Users\Admin\AppData\Local\Temp\resight-v1.7.exe"1⤵
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1568-1-0x000000014005A000-0x0000000140A84000-memory.dmp
memory/1568-0-0x00007FFD170B0000-0x00007FFD170B2000-memory.dmp
memory/1568-5-0x0000000140000000-0x0000000141B60000-memory.dmp
memory/1568-6-0x0000000140000000-0x0000000141B60000-memory.dmp
memory/1568-7-0x000000014005A000-0x0000000140A84000-memory.dmp
memory/1568-8-0x0000000140000000-0x0000000141B60000-memory.dmp
memory/1568-9-0x0000000140000000-0x0000000141B60000-memory.dmp
memory/1568-10-0x000000014005A000-0x0000000140A84000-memory.dmp