Overview

overview

7

Static

static

3

swapfell.exe

windows10-2004-x64

7

swapfell.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    148s
  • max time network
    146s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    25/08/2026, 08:42

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    swapfell.exe
  • Size 9.9MB
  • Sample260825-kl3fbavzds
  • SHA256 1dd8b09406ce91c7acb0b1e771a7d078d3f525354ba62bd5f10bd201eaf5e9f4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discovery

Malware Config

Signatures

  • Loads dropped DLL 23 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\swapfell.exe
    "C:\Users\Admin\AppData\Local\Temp\swapfell.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:1032

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Easing.mfx
        • Path C:\Users\Admin\AppData\Local\Temp\mrtA9C3.tmp\Easing.mfx
        • Size 168KB
        • SHA256 1b5e79e999c4cff19fe0260bdeaeeaea0fcda6057bf6d17bf0f121e9797d20ef
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OpenURLs.mfx
        • Path C:\Users\Admin\AppData\Local\Temp\mrtA9C3.tmp\OpenURLs.mfx
        • Size 81KB
        • SHA256 6d33883fe9a8fcdff9aab0e886d505a38e21a461c713e5ac7b7e0c2a65e934ae
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Viewport.mfx
        • Path C:\Users\Admin\AppData\Local\Temp\mrtA9C3.tmp\Viewport.mfx
        • Size 11KB
        • SHA256 69f35a440c5d153bba6c36ae3e2e7b6c8365f6a2ca9fe4eb216cd8a0bf784551
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ctrlx.mfx
        • Path C:\Users\Admin\AppData\Local\Temp\mrtA9C3.tmp\ctrlx.mfx
        • Size 44KB
        • SHA256 3407eb12f6bacec5ebd4df96ff3fd34741a3919fd46c2ec527364c5f1e753a65
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kcedit.mfx
        • Path C:\Users\Admin\AppData\Local\Temp\mrtA9C3.tmp\kcedit.mfx
        • Size 32KB
        • SHA256 c229b36ce4e3cf824844931c0dfce165da22c234397cb1e8258d05f86decd053
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kcini.mfx
        • Path C:\Users\Admin\AppData\Local\Temp\mrtA9C3.tmp\kcini.mfx
        • Size 28KB
        • SHA256 82c4f5af3c25a8daf60185833d3d61f2e8e2851ad640b59af54060eab6bc859e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kclist.mfx
        • Path C:\Users\Admin\AppData\Local\Temp\mrtA9C3.tmp\kclist.mfx
        • Size 32KB
        • SHA256 e2aaaf7b9ac7d45e1f824612f7a4ca5906b8cb2e3d4ed7f65ec6a6efbd843ed3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        mmf2d3d9.dll
        • Path C:\Users\Admin\AppData\Local\Temp\mrtA9C3.tmp\mmf2d3d9.dll
        • Size 1.1MB
        • SHA256 9eaa342059785bd584df956574c637e6d0e6016a099221a56e0397f8c86cd93f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        mmfs2.dll
        • Path C:\Users\Admin\AppData\Local\Temp\mrtA9C3.tmp\mmfs2.dll
        • Size 459KB
        • SHA256 c0d56cefb509e5600ac6b430adcaf53b81881d3fff4e62b7ede158d66d826622
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        mp3flt.sft
        • Path C:\Users\Admin\AppData\Local\Temp\mrtA9C3.tmp\mp3flt.sft
        • Size 24KB
        • SHA256 cd5bd7cc59eaf42bc0edf418ce6f077f9db369d5e3c414107b82492a877a6176
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        oggflt.sft
        • Path C:\Users\Admin\AppData\Local\Temp\mrtA9C3.tmp\oggflt.sft
        • Size 130KB
        • SHA256 848d266c7676a5f59e66386d76679b97d2934166a8d829d5d000b217ab7a34cf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pinball.mvx
        • Path C:\Users\Admin\AppData\Local\Temp\mrtA9C3.tmp\pinball.mvx
        • Size 68KB
        • SHA256 cbcd1b19716940cb7b48986dfd51f36bc9e04625c4b6face3822a16ed7b49825
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        txtblt.mfx
        • Path C:\Users\Admin\AppData\Local\Temp\mrtA9C3.tmp\txtblt.mfx
        • Size 36KB
        • SHA256 09a214d9738946b14c4470ea95b45de41641e5d69b7559dbf336f7b4624859b0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ultimatefullscreen.mfx
        • Path C:\Users\Admin\AppData\Local\Temp\mrtA9C3.tmp\ultimatefullscreen.mfx
        • Size 73KB
        • SHA256 fd179783ff6e6eb0959185087f33ed4a1b256e58762d9817bcb16888e20f7058
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        waveflt.sft
        • Path C:\Users\Admin\AppData\Local\Temp\mrtA9C3.tmp\waveflt.sft
        • Size 8KB
        • SHA256 41136b09b033a20b9acc430620ea095ff76afbdc7aebe7f26f7d2b4315afddef
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/1032-33-0x0000000001150000-0x0000000001180000-memory.dmp
        Download

        memory/1032-58-0x00000000014C0000-0x00000000014D8000-memory.dmp
        Download

        memory/1032-65-0x0000000001500000-0x0000000001512000-memory.dmp
        Download

        memory/1032-80-0x0000000003110000-0x0000000003134000-memory.dmp
        Download