Analysis
- max time kernel
150s - max time network
152s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
20/08/2026, 03:48
General
- Target Stellaris v2.3.0-v4.0.9 Plus 25 Trainer.exe
- Size 866KB
- Sample260820-ec4dcsssev
- SHA256 d3004ccb60c5abdfb11b7287bb9ed4569e3524fb888507b874f358a2af433b6b
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
- Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Stellaris v2.3.0-v4.0.9 Plus 25 Trainer.exe"C:\Users\Admin\AppData\Local\Temp\Stellaris v2.3.0-v4.0.9 Plus 25 Trainer.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5532-0-0x00007FF8CFE3F000-0x00007FF8CFE40000-memory.dmp
memory/5532-1-0x000001E5680D0000-0x000001E568106000-memory.dmp
memory/5532-2-0x00007FF8CFCB0000-0x00007FF8D0654000-memory.dmp
memory/5532-3-0x00007FF8CFCB0000-0x00007FF8D0654000-memory.dmp
memory/5532-4-0x00007FF8CFCB0000-0x00007FF8D0654000-memory.dmp
memory/5532-5-0x00007FF8CFCB0000-0x00007FF8D0654000-memory.dmp
memory/5532-6-0x00007FF8CFCB0000-0x00007FF8D0654000-memory.dmp
memory/5532-7-0x00007FF8CFCB0000-0x00007FF8D0654000-memory.dmp
memory/5532-8-0x00007FF8CFCB0000-0x00007FF8D0654000-memory.dmp
memory/5532-9-0x00007FF8CFCB0000-0x00007FF8D0654000-memory.dmp
memory/5532-10-0x00007FF8CFCB0000-0x00007FF8D0654000-memory.dmp
memory/5532-11-0x00007FF8CFCB0000-0x00007FF8D0654000-memory.dmp
memory/5532-12-0x000001E56DB70000-0x000001E56DB78000-memory.dmp
memory/5532-14-0x000001E56DBC0000-0x000001E56DBCE000-memory.dmp
memory/5532-13-0x000001E56DBF0000-0x000001E56DC2E000-memory.dmp
memory/5532-18-0x00007FF8CFCB0000-0x00007FF8D0654000-memory.dmp
memory/5532-19-0x00007FF8CFCB0000-0x00007FF8D0654000-memory.dmp
memory/5532-20-0x00007FF8CFCB0000-0x00007FF8D0654000-memory.dmp
memory/5532-22-0x00007FF8CFCB0000-0x00007FF8D0654000-memory.dmp
memory/5532-21-0x00007FF8CFCB0000-0x00007FF8D0654000-memory.dmp