Analysis
- user interaction
yes - max time kernel
118s - max time network
111s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
22/08/2026, 11:11
General
- Target RVDrE6YezsRgHIHrWekHDnKMa2W8uVx5yBlFUZSusJ6vobePx5HaRQFkAjFOCWE5.exe
- Size 17.5MB
- Sample260822-nasnhstdkd
- SHA256 d4c4dd4bbdebdebea1de8df2241b39bcc48ec5c604ec06bc6401dc3e10d4af44
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
- Enumerates system info in registry 2 TTPs 5 IoCs
- Suspicious behavior: EnumeratesProcesses 2 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\RVDrE6YezsRgHIHrWekHDnKMa2W8uVx5yBlFUZSusJ6vobePx5HaRQFkAjFOCWE5.exe"C:\Users\Admin\AppData\Local\Temp\RVDrE6YezsRgHIHrWekHDnKMa2W8uVx5yBlFUZSusJ6vobePx5HaRQFkAjFOCWE5.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
store.jfm
memory/452-40-0x00000139F96C0000-0x00000139F96C1000-memory.dmp
memory/452-42-0x00000139F96C0000-0x00000139F96C1000-memory.dmp
memory/452-33-0x00000139F96C0000-0x00000139F96C1000-memory.dmp
memory/452-34-0x00000139F96C0000-0x00000139F96C1000-memory.dmp
memory/452-36-0x00000139F96C0000-0x00000139F96C1000-memory.dmp
memory/452-35-0x00000139F96C0000-0x00000139F96C1000-memory.dmp
memory/452-37-0x00000139F96C0000-0x00000139F96C1000-memory.dmp
memory/452-38-0x00000139F96C0000-0x00000139F96C1000-memory.dmp
memory/452-39-0x00000139F96C0000-0x00000139F96C1000-memory.dmp
memory/452-43-0x00000139F9300000-0x00000139F9301000-memory.dmp
memory/452-32-0x00000139F96A0000-0x00000139F96A1000-memory.dmp
memory/452-41-0x00000139F96C0000-0x00000139F96C1000-memory.dmp
memory/452-0-0x00000139E9040000-0x00000139E9050000-memory.dmp
memory/452-44-0x00000139F92F0000-0x00000139F92F1000-memory.dmp
memory/452-46-0x00000139F9300000-0x00000139F9301000-memory.dmp
memory/452-49-0x00000139F92F0000-0x00000139F92F1000-memory.dmp
memory/452-52-0x00000139E89E0000-0x00000139E89E1000-memory.dmp
memory/452-16-0x00000139E9140000-0x00000139E9150000-memory.dmp
memory/452-64-0x00000139F9420000-0x00000139F9421000-memory.dmp
memory/452-66-0x00000139F9430000-0x00000139F9431000-memory.dmp
memory/452-67-0x00000139F9430000-0x00000139F9431000-memory.dmp
memory/452-68-0x00000139F9540000-0x00000139F9541000-memory.dmp