Analysis
- max time kernel
149s - max time network
128s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
25/08/2026, 15:56
General
- Target 15e6ff639e748771b01ba2abc4cdd11b9f63d1b1d50adff4dd5009ba76d24e8b.exe
- Size 1.1MB
- Sample260825-tddawsvfpc
- SHA256 15e6ff639e748771b01ba2abc4cdd11b9f63d1b1d50adff4dd5009ba76d24e8b
Score
7/10
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
- UPX packed file 4 IoCs
Detects executables packed with UPX/modified UPX open source packer.
- Modifies registry class 3 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\15e6ff639e748771b01ba2abc4cdd11b9f63d1b1d50adff4dd5009ba76d24e8b.exe"C:\Users\Admin\AppData\Local\Temp\15e6ff639e748771b01ba2abc4cdd11b9f63d1b1d50adff4dd5009ba76d24e8b.exe"1⤵
- Modifies registry class
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Skype\DataRv\SearchApp_x64.exe"C:\Users\Admin\AppData\Local\Skype\DataRv\SearchApp_x64.exe"2⤵
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
SearchApp_x64.exe
memory/1296-7-0x00007FF6B49E0000-0x00007FF6B4B0A000-memory.dmp
memory/2984-6-0x00007FF726FD0000-0x00007FF7270B0000-memory.dmp
memory/2984-8-0x00007FF726FD0000-0x00007FF7270B0000-memory.dmp
memory/2984-22-0x00007FF726FD0000-0x00007FF7270B0000-memory.dmp