Analysis
- user interaction
yes - max time kernel
150s - max time network
30s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
- submitted
20/08/2026, 02:28
General
- Target TheChoicerVoicer_0-5-1 stable compatibility.exe
- Size 201.6MB
- Sample260820-cycres1vbx
- SHA256 38cf8ed6821beeb3de8d682060900fe98be4062450a7f8917ce3e845ff3f9011
Malware Config
Signatures
- Modifies registry class 1 IoCs
- Suspicious use of FindShellTrayWindow 1 IoCs
- Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\TheChoicerVoicer_0-5-1 stable compatibility.exe"C:\Users\Admin\AppData\Local\Temp\TheChoicerVoicer_0-5-1 stable compatibility.exe"1⤵
- Modifies registry class
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5540-54-0x00007FF7D6C90000-0x00007FF7DCAE8000-memory.dmp
memory/5540-64-0x00007FF7D6C90000-0x00007FF7DCAE8000-memory.dmp
memory/5540-65-0x00007FF7D6C90000-0x00007FF7DCAE8000-memory.dmp
memory/5540-66-0x00007FF7D6C90000-0x00007FF7DCAE8000-memory.dmp
memory/5540-67-0x00007FF7D6C90000-0x00007FF7DCAE8000-memory.dmp
memory/5540-68-0x00007FF7D6C90000-0x00007FF7DCAE8000-memory.dmp
memory/5540-70-0x00007FF7D6C90000-0x00007FF7DCAE8000-memory.dmp
memory/5540-71-0x00007FF7D6C90000-0x00007FF7DCAE8000-memory.dmp
memory/5540-72-0x00007FF7D6C90000-0x00007FF7DCAE8000-memory.dmp
memory/5540-73-0x00007FF7D6C90000-0x00007FF7DCAE8000-memory.dmp
memory/5540-74-0x00007FF7D6C90000-0x00007FF7DCAE8000-memory.dmp
memory/5540-75-0x00007FF7D6C90000-0x00007FF7DCAE8000-memory.dmp
memory/5540-76-0x00007FF7D6C90000-0x00007FF7DCAE8000-memory.dmp
memory/5540-77-0x00007FF7D6C90000-0x00007FF7DCAE8000-memory.dmp