Analysis

  • max time kernel
    150s
  • max time network
    113s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    25/08/2026, 22:27

General

  • Target
    8578cb4f94efe96a2c7fce242afe7743d9ae9dc7b5e28862abe2ce249b700c52.exe
  • Size 850KB
  • Sample260825-2c2wvszclf
  • SHA256 8578cb4f94efe96a2c7fce242afe7743d9ae9dc7b5e28862abe2ce249b700c52
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10

Malware Config

Signatures

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8578cb4f94efe96a2c7fce242afe7743d9ae9dc7b5e28862abe2ce249b700c52.exe
    "C:\Users\Admin\AppData\Local\Temp\8578cb4f94efe96a2c7fce242afe7743d9ae9dc7b5e28862abe2ce249b700c52.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    PID:2576

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/2576-0-0x000001780DD50000-0x000001780DD51000-memory.dmp

        memory/2576-8-0x000001780DD50000-0x000001780DD51000-memory.dmp

        memory/2576-9-0x000001780F6B0000-0x000001780F6B1000-memory.dmp

        memory/2576-10-0x000001780F6D0000-0x000001780F6D1000-memory.dmp

        memory/2576-11-0x000001780F6F0000-0x000001780F6F1000-memory.dmp

        memory/2576-12-0x000001780F720000-0x000001780F721000-memory.dmp

        memory/2576-13-0x000001780F830000-0x000001780F831000-memory.dmp

        memory/2576-14-0x000001780F710000-0x000001780F711000-memory.dmp

        memory/2576-15-0x000001780F6C0000-0x000001780F6C1000-memory.dmp

        memory/2576-19-0x000001780F6C0000-0x000001780F6C1000-memory.dmp