Analysis
- max time kernel
30s - max time network
22s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
- submitted
23/08/2026, 14:05
General
- Target internal-rust-2026/internal.exe
- Size 93.3MB
- Sample260823-rd28xastes
- SHA256 bf97ff405bd51b9279e1a0ebce294523146453d722ebc210bf4eb795e1db58a1
Malware Config
Signatures
- Looks up external IP address via web service 1 TTPs 2 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
- Maps connected drives based on registry 3 TTPs 3 IoCs
Disk information is often read in order to detect sandboxing environments.
- Checks SCSI registry key(s) 3 TTPs 4 IoCs
SCSI information is often read in order to detect sandboxing environments.
- Checks processor information in registry 2 TTPs 24 IoCs
Processor information is often read in order to detect sandboxing environments.
- Enumerates system info in registry 2 TTPs 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\internal-rust-2026\internal.exe"C:\Users\Admin\AppData\Local\Temp\internal-rust-2026\internal.exe"1⤵
- Maps connected drives based on registry
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3532-0-0x000001AA57412000-0x000001AA57413000-memory.dmp
memory/3532-1-0x000001AA57410000-0x000001AA57411000-memory.dmp
memory/3532-7-0x000001AA57416000-0x000001AA57417000-memory.dmp
memory/3532-6-0x000001AA57417000-0x000001AA57418000-memory.dmp
memory/3532-5-0x000001AA57411000-0x000001AA57412000-memory.dmp
memory/3532-4-0x000001AA57415000-0x000001AA57416000-memory.dmp
memory/3532-3-0x000001AA57414000-0x000001AA57415000-memory.dmp
memory/3532-2-0x000001AA57413000-0x000001AA57414000-memory.dmp
memory/3532-10-0x000001AA57418000-0x000001AA5741A000-memory.dmp
memory/3532-25-0x000001AA5741B000-0x000001AA5741C000-memory.dmp
memory/3532-26-0x000001AA5741D000-0x000001AA5741E000-memory.dmp
memory/3532-24-0x000001AA5741C000-0x000001AA5741D000-memory.dmp
memory/3532-23-0x000001AA5741A000-0x000001AA5741B000-memory.dmp
memory/3532-42-0x000001AA5741E000-0x000001AA5741F000-memory.dmp
memory/3532-41-0x000001AA57412000-0x000001AA57413000-memory.dmp
memory/3532-44-0x000001AA5741F000-0x000001AA57421000-memory.dmp
memory/3532-48-0x000001AA57424000-0x000001AA57425000-memory.dmp
memory/3532-47-0x000001AA57423000-0x000001AA57424000-memory.dmp
memory/3532-46-0x000001AA57422000-0x000001AA57423000-memory.dmp
memory/3532-43-0x000001AA57421000-0x000001AA57422000-memory.dmp
memory/3532-45-0x000001AA57415000-0x000001AA57416000-memory.dmp
memory/3532-49-0x000001AA49000000-0x000001AA4A000000-memory.dmp
memory/3532-50-0x000001AA49000000-0x000001AA4A000000-memory.dmp
memory/3532-51-0x000001AA49000000-0x000001AA4A000000-memory.dmp
memory/3532-63-0x000001AA49000000-0x000001AA4A000000-memory.dmp
memory/3532-73-0x000001AA5742F000-0x000001AA57430000-memory.dmp
memory/3532-70-0x000001AA5742C000-0x000001AA5742D000-memory.dmp
memory/3532-64-0x000001AA57425000-0x000001AA57426000-memory.dmp
memory/3532-76-0x000001AA57432000-0x000001AA57433000-memory.dmp
memory/3532-75-0x000001AA57431000-0x000001AA57432000-memory.dmp
memory/3532-74-0x000001AA57430000-0x000001AA57431000-memory.dmp
memory/3532-72-0x000001AA5742E000-0x000001AA5742F000-memory.dmp
memory/3532-71-0x000001AA5742D000-0x000001AA5742E000-memory.dmp
memory/3532-69-0x000001AA5742B000-0x000001AA5742C000-memory.dmp
memory/3532-68-0x000001AA5742A000-0x000001AA5742B000-memory.dmp
memory/3532-67-0x000001AA57429000-0x000001AA5742A000-memory.dmp
memory/3532-65-0x000001AA57426000-0x000001AA57427000-memory.dmp
memory/3532-66-0x000001AA57427000-0x000001AA57429000-memory.dmp
memory/3532-77-0x000001AA49000000-0x000001AA4A000000-memory.dmp
memory/3532-78-0x000001AA49000000-0x000001AA4A000000-memory.dmp
memory/3532-79-0x000001AA49000000-0x000001AA4A000000-memory.dmp
memory/3532-81-0x000001AA57435000-0x000001AA57436000-memory.dmp
memory/3532-80-0x000001AA9740E000-0x000001AA9740F000-memory.dmp
memory/3532-82-0x000001AA49000000-0x000001AA4A000000-memory.dmp
memory/3532-83-0x000001AA49000000-0x000001AA4A000000-memory.dmp
memory/3532-84-0x000001AA49000000-0x000001AA4A000000-memory.dmp
memory/3532-85-0x000001AA49000000-0x000001AA4A000000-memory.dmp
memory/3532-86-0x000001AA49000000-0x000001AA4A000000-memory.dmp
memory/3532-87-0x000001AA49000000-0x000001AA4A000000-memory.dmp
memory/3532-88-0x000001AA49000000-0x000001AA4A000000-memory.dmp
memory/3532-89-0x000001AA49000000-0x000001AA4A000000-memory.dmp
memory/3532-90-0x000001AA49000000-0x000001AA4A000000-memory.dmp