Analysis
- user interaction
yes - max time kernel
23s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
- submitted
23/08/2026, 05:53
General
- Target Leitostrap.exe
- Size 81.2MB
- Sample260823-glcccaem5w
- SHA256 737a4fe65aeaec919f27849277d6a00d328a443d896a17ed7a4d27f71d5bb869
Malware Config
Signatures
- Loads dropped DLL 3 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Leitostrap.exe"C:\Users\Admin\AppData\Local\Temp\Leitostrap.exe"1⤵
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
D3DCompiler_47_cor3.dll
PresentationNative_cor3.dll
wpfgfx_cor3.dll
memory/404-5-0x0000020A44BD0000-0x0000020A45B20000-memory.dmp
memory/404-9-0x0000020A47C10000-0x0000020A48B30000-memory.dmp
memory/404-17-0x0000020A46640000-0x0000020A467A0000-memory.dmp
memory/404-25-0x000002022F2C0000-0x000002022F310000-memory.dmp
memory/404-21-0x0000020A48B30000-0x0000020A48DA0000-memory.dmp
memory/404-33-0x0000020230C90000-0x0000020230CD0000-memory.dmp
memory/404-29-0x0000020A491E0000-0x0000020A49390000-memory.dmp
memory/404-13-0x0000020A43A30000-0x0000020A43C50000-memory.dmp
memory/404-41-0x0000020A43C60000-0x0000020A43C80000-memory.dmp
memory/404-69-0x0000020A4B3C0000-0x0000020A4B400000-memory.dmp
memory/404-65-0x0000020A4B150000-0x0000020A4B1A0000-memory.dmp
memory/404-61-0x0000020A4B260000-0x0000020A4B300000-memory.dmp
memory/404-57-0x0000020A4B120000-0x0000020A4B150000-memory.dmp
memory/404-53-0x0000020A4B0A0000-0x0000020A4B120000-memory.dmp
memory/404-49-0x0000020A45FA0000-0x0000020A45FC0000-memory.dmp
memory/404-45-0x0000020A45F80000-0x0000020A45FA0000-memory.dmp
memory/404-37-0x0000020A45EE0000-0x0000020A45F10000-memory.dmp
memory/404-73-0x0000020A4BF60000-0x0000020A4C750000-memory.dmp
memory/404-81-0x000002022F220000-0x000002022F230000-memory.dmp
memory/404-86-0x0000020A46CD0000-0x0000020A46CF0000-memory.dmp
memory/404-77-0x0000020A4B4C0000-0x0000020A4B540000-memory.dmp
memory/404-89-0x0000020A4B400000-0x0000020A4B420000-memory.dmp
memory/404-97-0x0000020A4B5A0000-0x0000020A4B5C0000-memory.dmp
memory/404-112-0x0000020A4D370000-0x0000020A4DAE0000-memory.dmp
memory/404-116-0x0000020A4B740000-0x0000020A4B770000-memory.dmp
memory/404-132-0x0000020A4C980000-0x0000020A4C990000-memory.dmp
memory/404-140-0x0000020A4CB40000-0x0000020A4CB50000-memory.dmp
memory/404-136-0x0000020A4DEE0000-0x0000020A4DF40000-memory.dmp
memory/404-128-0x0000020A4C940000-0x0000020A4C960000-memory.dmp
memory/404-124-0x0000020A4CA60000-0x0000020A4CB20000-memory.dmp
memory/404-120-0x0000020A4C8F0000-0x0000020A4C910000-memory.dmp
memory/404-108-0x0000020A4B5C0000-0x0000020A4B610000-memory.dmp
memory/404-104-0x0000020A4C750000-0x0000020A4C850000-memory.dmp
memory/404-93-0x0000020A4B540000-0x0000020A4B560000-memory.dmp
memory/404-144-0x0000020A4E180000-0x0000020A4E230000-memory.dmp
memory/404-148-0x0000020A4E2A0000-0x0000020A4E310000-memory.dmp
memory/404-152-0x0000020A4E500000-0x0000020A4E660000-memory.dmp
memory/404-156-0x0000020A4E760000-0x0000020A4E860000-memory.dmp
memory/404-160-0x0000020A4FD60000-0x0000020A50A80000-memory.dmp
memory/404-168-0x0000020A50FE0000-0x0000020A511B0000-memory.dmp
memory/404-164-0x0000020A50A80000-0x0000020A50E00000-memory.dmp
memory/404-178-0x0000020A4E0A0000-0x0000020A4E0C0000-memory.dmp
memory/404-174-0x0000020A4EBA0000-0x0000020A4EC10000-memory.dmp
memory/404-182-0x0000020A4EC40000-0x0000020A4EC90000-memory.dmp
memory/404-186-0x0000020A51360000-0x0000020A51440000-memory.dmp
memory/404-195-0x0000020A4E080000-0x0000020A4E090000-memory.dmp
memory/404-199-0x0000020A4EC90000-0x0000020A4ECA0000-memory.dmp
memory/404-203-0x0000020A56F60000-0x0000020A57050000-memory.dmp
memory/404-207-0x0000020A54E80000-0x0000020A54EA0000-memory.dmp