Analysis
- geolocation tags
- max time kernel
150s - max time network
127s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
19/08/2026, 14:41
General
- Target Antidote Spoofer.exe
- Size 5.3MB
- Sample260819-r2e4aaff84
- SHA256 be0244edbb5b216d83b9215d6e92992f3afca2a8d2969e5f6a9cb9f8737adcc7
Score
5/10
Malware Config
Signatures
- ConfuserEx .NET packer 1 IoCs
Detects ConfuserEx .NET packer.
- Suspicious behavior: EnumeratesProcesses 1 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Antidote Spoofer.exe"C:\Users\Admin\AppData\Local\Temp\Antidote Spoofer.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3716-0-0x00007FFD38F4F000-0x00007FFD38F50000-memory.dmp
memory/3716-1-0x000001E4DEDB0000-0x000001E4DF30C000-memory.dmp
memory/3716-2-0x00007FFD38DC0000-0x00007FFD39764000-memory.dmp
memory/3716-3-0x00007FFD38DC0000-0x00007FFD39764000-memory.dmp
memory/3716-4-0x000001E4F9A70000-0x000001E4F9BBE000-memory.dmp
memory/3716-6-0x000001E4F9BC0000-0x000001E4F9F96000-memory.dmp
memory/3716-5-0x00007FFD38DC0000-0x00007FFD39764000-memory.dmp
memory/3716-7-0x00007FFD38DC0000-0x00007FFD39764000-memory.dmp