Analysis
- user interaction
yes - max time kernel
149s - max time network
174s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
20/08/2026, 02:28
General
- Target TheChoicerVoicer_0-5-1 stable compatibility.exe
- Size 201.6MB
- Sample260820-cycres1vbx
- SHA256 38cf8ed6821beeb3de8d682060900fe98be4062450a7f8917ce3e845ff3f9011
Malware Config
Signatures
- Modifies registry class 1 IoCs
- Suspicious use of FindShellTrayWindow 1 IoCs
- Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\TheChoicerVoicer_0-5-1 stable compatibility.exe"C:\Users\Admin\AppData\Local\Temp\TheChoicerVoicer_0-5-1 stable compatibility.exe"1⤵
- Modifies registry class
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3884-54-0x00007FF66AAD0000-0x00007FF670928000-memory.dmp
memory/3884-64-0x00007FF66AAD0000-0x00007FF670928000-memory.dmp
memory/3884-65-0x00007FF66AAD0000-0x00007FF670928000-memory.dmp
memory/3884-66-0x00007FF66AAD0000-0x00007FF670928000-memory.dmp
memory/3884-67-0x00007FF66AAD0000-0x00007FF670928000-memory.dmp
memory/3884-68-0x00007FF66AAD0000-0x00007FF670928000-memory.dmp
memory/3884-69-0x00007FF66AAD0000-0x00007FF670928000-memory.dmp
memory/3884-70-0x00007FF66AAD0000-0x00007FF670928000-memory.dmp
memory/3884-71-0x00007FF66AAD0000-0x00007FF670928000-memory.dmp
memory/3884-72-0x00007FF66AAD0000-0x00007FF670928000-memory.dmp
memory/3884-73-0x00007FF66AAD0000-0x00007FF670928000-memory.dmp
memory/3884-74-0x00007FF66AAD0000-0x00007FF670928000-memory.dmp
memory/3884-75-0x00007FF66AAD0000-0x00007FF670928000-memory.dmp
memory/3884-76-0x00007FF66AAD0000-0x00007FF670928000-memory.dmp