Resubmissions
20/08/2026, 00:15
260820-ajxf6syzhs1020/08/2026, 00:01
260820-aaz6pswekc519/08/2026, 23:53
260819-3xl7kswdlf5Analysis
- user interaction
yes - max time kernel
801s - max time network
454s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
20/08/2026, 00:01
General
- Target 20260819_164917_webdav_ziomzpihivrtvhyhayzz.exe
- Size 5.2MB
- Sample260820-aaz6pswekc
- SHA256 cb8c8cd426b8b796839d7de7b3dbdd2a153c36d493ec298e44b53968f254e701
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
- Program crash 1 IoCs
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\20260819_164917_webdav_ziomzpihivrtvhyhayzz.exe"C:\Users\Admin\AppData\Local\Temp\20260819_164917_webdav_ziomzpihivrtvhyhayzz.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4112 -s 5362⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 4112 -ip 41121⤵
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4112-0-0x0000000003270000-0x000000000336D000-memory.dmp
memory/4112-1-0x00000000FF450000-0x00000000FF451000-memory.dmp
memory/4112-9-0x00000000FF450000-0x00000000FF451000-memory.dmp
memory/4112-7-0x00000000FF450000-0x00000000FF451000-memory.dmp
memory/4112-15-0x00000000FF450000-0x00000000FF451000-memory.dmp
memory/4112-11-0x00000000FF450000-0x00000000FF451000-memory.dmp
memory/4112-6-0x00000000FF450000-0x00000000FF451000-memory.dmp
memory/4112-4-0x00000000FF450000-0x00000000FF451000-memory.dmp
memory/4112-23-0x00000000FF450000-0x00000000FF451000-memory.dmp
memory/4112-609-0x00000000778D8000-0x00000000778D9000-memory.dmp
memory/4112-626-0x00000000FF5F0000-0x00000000FF5F5000-memory.dmp
memory/4112-652-0x0000000003600000-0x0000000003601000-memory.dmp
memory/4112-654-0x0000000003610000-0x0000000003611000-memory.dmp
memory/4112-668-0x0000000003680000-0x0000000003681000-memory.dmp
memory/4112-673-0x00000000036B0000-0x00000000036B1000-memory.dmp
memory/4112-672-0x00000000036A0000-0x00000000036A1000-memory.dmp
memory/4112-671-0x00000000036A0000-0x00000000036A1000-memory.dmp
memory/4112-670-0x0000000003690000-0x0000000003691000-memory.dmp
memory/4112-669-0x0000000003690000-0x0000000003691000-memory.dmp
memory/4112-675-0x00000000036C0000-0x00000000036C1000-memory.dmp
memory/4112-674-0x00000000036B0000-0x00000000036B1000-memory.dmp
memory/4112-683-0x0000000003700000-0x0000000003701000-memory.dmp
memory/4112-680-0x00000000036E0000-0x00000000036E1000-memory.dmp
memory/4112-679-0x00000000036E0000-0x00000000036E1000-memory.dmp
memory/4112-677-0x00000000036D0000-0x00000000036D1000-memory.dmp
memory/4112-676-0x00000000036C0000-0x00000000036C1000-memory.dmp
memory/4112-681-0x00000000036F0000-0x00000000036F1000-memory.dmp
memory/4112-685-0x0000000003710000-0x0000000003711000-memory.dmp
memory/4112-684-0x0000000003700000-0x0000000003701000-memory.dmp
memory/4112-682-0x00000000036F0000-0x00000000036F1000-memory.dmp
memory/4112-678-0x00000000036D0000-0x00000000036D1000-memory.dmp
memory/4112-667-0x0000000003680000-0x0000000003681000-memory.dmp
memory/4112-666-0x0000000003670000-0x0000000003671000-memory.dmp
memory/4112-665-0x0000000003670000-0x0000000003671000-memory.dmp
memory/4112-664-0x0000000003660000-0x0000000003661000-memory.dmp
memory/4112-663-0x0000000003660000-0x0000000003661000-memory.dmp
memory/4112-662-0x0000000003650000-0x0000000003651000-memory.dmp
memory/4112-661-0x0000000003650000-0x0000000003651000-memory.dmp
memory/4112-660-0x0000000003640000-0x0000000003641000-memory.dmp
memory/4112-659-0x0000000003640000-0x0000000003641000-memory.dmp
memory/4112-656-0x0000000003620000-0x0000000003621000-memory.dmp
memory/4112-658-0x0000000003630000-0x0000000003631000-memory.dmp
memory/4112-657-0x0000000003630000-0x0000000003631000-memory.dmp
memory/4112-655-0x0000000003620000-0x0000000003621000-memory.dmp
memory/4112-653-0x0000000003610000-0x0000000003611000-memory.dmp
memory/4112-651-0x0000000003600000-0x0000000003601000-memory.dmp
memory/4112-650-0x00000000035F0000-0x00000000035F1000-memory.dmp
memory/4112-649-0x00000000035F0000-0x00000000035F1000-memory.dmp
memory/4112-648-0x00000000035E0000-0x00000000035E1000-memory.dmp
memory/4112-645-0x00000000035D0000-0x00000000035D1000-memory.dmp
memory/4112-644-0x00000000035C0000-0x00000000035C1000-memory.dmp
memory/4112-647-0x00000000035E0000-0x00000000035E1000-memory.dmp
memory/4112-643-0x00000000035C0000-0x00000000035C1000-memory.dmp
memory/4112-646-0x00000000035D0000-0x00000000035D1000-memory.dmp
memory/4112-642-0x00000000035B0000-0x00000000035B1000-memory.dmp
memory/4112-641-0x00000000035B0000-0x00000000035B1000-memory.dmp
memory/4112-640-0x00000000035A0000-0x00000000035A1000-memory.dmp
memory/4112-639-0x00000000035A0000-0x00000000035A1000-memory.dmp
memory/4112-638-0x0000000003580000-0x0000000003581000-memory.dmp
memory/4112-637-0x0000000003580000-0x0000000003581000-memory.dmp
memory/4112-636-0x0000000003570000-0x0000000003571000-memory.dmp
memory/4112-635-0x0000000003570000-0x0000000003571000-memory.dmp
memory/4112-634-0x0000000003560000-0x0000000003561000-memory.dmp
memory/4112-633-0x0000000003560000-0x0000000003561000-memory.dmp
memory/4112-632-0x0000000003450000-0x0000000003451000-memory.dmp
memory/4112-631-0x0000000003450000-0x0000000003451000-memory.dmp
memory/4112-739-0x0000000003270000-0x000000000336D000-memory.dmp
memory/4112-791-0x0000000003270000-0x000000000336D000-memory.dmp
memory/4112-838-0x0000000003270000-0x000000000336D000-memory.dmp
memory/4112-837-0x0000000003270000-0x000000000336D000-memory.dmp
memory/4112-949-0x0000000003270000-0x000000000336D000-memory.dmp
memory/4112-1014-0x0000000003270000-0x000000000336D000-memory.dmp
memory/4112-2116-0x0000000003270000-0x000000000336D000-memory.dmp
memory/4112-2175-0x0000000003270000-0x000000000336D000-memory.dmp
memory/4112-3345-0x0000000003270000-0x000000000336D000-memory.dmp
memory/4112-2147-0x0000000003270000-0x000000000336D000-memory.dmp
memory/4112-2088-0x0000000003270000-0x000000000336D000-memory.dmp
memory/4112-3346-0x0000000003270000-0x000000000336D000-memory.dmp