Analysis
- user interaction
yes - max time kernel
149s - max time network
38s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
25/08/2026, 14:40
General
- Target UNICORN.exe
- Size 75KB
- Sample260825-r1wpmszzav
- SHA256 307d782b02b1a3d919ca20648c57943f22b79acbfe3e137cdc35b90bc60e0e03
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\UNICORN.exe"C:\Users\Admin\AppData\Local\Temp\UNICORN.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4560-0-0x00007FFF4B65F000-0x00007FFF4B660000-memory.dmp
memory/4560-1-0x0000020136430000-0x0000020136446000-memory.dmp
memory/4560-2-0x00007FFF4B4D0000-0x00007FFF4BE74000-memory.dmp
memory/4560-3-0x00007FFF4B4D0000-0x00007FFF4BE74000-memory.dmp
memory/4560-4-0x00007FFF4B4D0000-0x00007FFF4BE74000-memory.dmp
memory/4560-5-0x00007FFF4B4D0000-0x00007FFF4BE74000-memory.dmp
memory/4560-6-0x00007FFF4B4D0000-0x00007FFF4BE74000-memory.dmp
memory/4560-7-0x00007FFF4B4D0000-0x00007FFF4BE74000-memory.dmp
memory/4560-8-0x00007FFF4B4D0000-0x00007FFF4BE74000-memory.dmp
memory/4560-9-0x00007FFF4B4D0000-0x00007FFF4BE74000-memory.dmp
memory/4560-10-0x00007FFF4B4D0000-0x00007FFF4BE74000-memory.dmp
memory/4560-11-0x00007FFF4B4D0000-0x00007FFF4BE74000-memory.dmp