7d260684ed90d942f59ac5d51400413540f085c9c8cb68c3eb7a3c19d5a3d7c6

Analysis

max time kernel
148s
max time network
149s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/08/2026, 01:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
matepath.exe
Size 280KB
Sample260820-b8fqdsdk8x
SHA256 7d260684ed90d942f59ac5d51400413540f085c9c8cb68c3eb7a3c19d5a3d7c6
MD5 3939a47ee1b294ac786eb76494a5c2a3
SHA1 e3e584e388549ad06bfaf0301b78d1a55cb0d137
SHA512 1d3af3a0083803215a7572882acc502700bb16b23fd7d1e5bbd654ff67512bd47f372e926631bf5057f81a50f83d340f4577e594c5b46b9fd0d4facf7965cb3f
SSDEEP 6144:t3YvM8jOaacVjMu9WbX2f56wFgkd0hmPWwINq+9kbuhoXZ:xYvMGOaacBMuNfFFfdntZ
TLSH
T1D0542812B6B449D9D923817C84838A52DE72FC142720DDEB26A1F92E5FB35D1BC39B31
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1772	matepath.exe

C:\Users\Admin\AppData\Local\Temp\matepath.exe
"C:\Users\Admin\AppData\Local\Temp\matepath.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:1772

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1772-0-0x00000165A6200000-0x00000165A63CA000-memory.dmp

Download