Analysis
- max time kernel
299s - max time network
300s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
19/08/2026, 17:51
General
- Target Indent No MOPC-11-4294040921.exe
- Size 1.4MB
- Sample260819-we93cszbld
- SHA256 1bdead5be0935be1883d57bb4a9c9b9a3b767b6617d4029c2b9e69d78edad211
Malware Config
Signatures
- Suspicious use of SetThreadContext 1 IoCs
- Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Indent No MOPC-11-4294040921.exe"C:\Users\Admin\AppData\Local\Temp\Indent No MOPC-11-4294040921.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
-
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\MSBuild.exeC:\Windows\Microsoft.NET\Framework64\v4.0.30319\MSBuild.exe2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3468-10-0x0000000140000000-0x000000014004A000-memory.dmp
memory/6072-6-0x00007FFB0B2A0000-0x00007FFB0BC44000-memory.dmp
memory/6072-2-0x00007FFB0B2A0000-0x00007FFB0BC44000-memory.dmp
memory/6072-3-0x00007FFB0B2A0000-0x00007FFB0BC44000-memory.dmp
memory/6072-4-0x00007FFB0B2A0000-0x00007FFB0BC44000-memory.dmp
memory/6072-5-0x00000292B2BA0000-0x00000292B2BC6000-memory.dmp
memory/6072-0-0x00007FFB0B42F000-0x00007FFB0B430000-memory.dmp
memory/6072-7-0x00007FFB0B2A0000-0x00007FFB0BC44000-memory.dmp
memory/6072-8-0x00007FFB0B2A0000-0x00007FFB0BC44000-memory.dmp
memory/6072-9-0x00000292CD300000-0x00000292CD3E8000-memory.dmp
memory/6072-1-0x00000292B0B80000-0x00000292B0CEE000-memory.dmp
memory/6072-11-0x00007FFB0B2A0000-0x00007FFB0BC44000-memory.dmp
memory/6072-12-0x00007FFB0B2A0000-0x00007FFB0BC44000-memory.dmp