Analysis
- user interaction
yes - max time kernel
151s - max time network
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
26/08/2026, 22:22
General
- Target HAKI_-_Free_temp.exe
- Size 70.6MB
- Sample260826-2alf4avvht
- SHA256 e365740dec18aaee2feea01d4cf5adc2efd96e3206b2b5c00d088f7c5694cb91
Malware Config
Signatures
- Loads dropped DLL 3 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\HAKI_-_Free_temp.exe"C:\Users\Admin\AppData\Local\Temp\HAKI_-_Free_temp.exe"1⤵
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
D3DCompiler_47_cor3.dll
PresentationNative_cor3.dll
wpfgfx_cor3.dll
memory/5964-80-0x000001F4098E0000-0x000001F409930000-memory.dmp
memory/5964-57-0x000001F406710000-0x000001F406750000-memory.dmp
memory/5964-17-0x000001F402020000-0x000001F402180000-memory.dmp
memory/5964-29-0x000001F407030000-0x000001F407860000-memory.dmp
memory/5964-69-0x000001F409610000-0x000001F409630000-memory.dmp
memory/5964-53-0x000001F406450000-0x000001F406470000-memory.dmp
memory/5964-25-0x000001F404360000-0x000001F4043A0000-memory.dmp
memory/5964-5-0x000001F402E20000-0x000001F403AB0000-memory.dmp
memory/5964-88-0x000001F409960000-0x000001F409990000-memory.dmp
memory/5964-84-0x000001F40A440000-0x000001F40ABE0000-memory.dmp
memory/5964-92-0x000001F409A70000-0x000001F409B00000-memory.dmp
memory/5964-108-0x000001F4099C0000-0x000001F4099E0000-memory.dmp
memory/5964-116-0x000001F409B90000-0x000001F409BB0000-memory.dmp
memory/5964-112-0x000001F40BAF0000-0x000001F40BB40000-memory.dmp
memory/5964-104-0x000001F40B9E0000-0x000001F40BAA0000-memory.dmp
memory/5964-100-0x000001F409B30000-0x000001F409B60000-memory.dmp
memory/5964-96-0x000001F409990000-0x000001F4099A0000-memory.dmp
memory/5964-78-0x000001F4097D0000-0x000001F4098E0000-memory.dmp
memory/5964-21-0x000001F404310000-0x000001F404360000-memory.dmp
memory/5964-61-0x000001F4066A0000-0x000001F4066C0000-memory.dmp
memory/5964-65-0x000001F4067C0000-0x000001F4067F0000-memory.dmp
memory/5964-49-0x000001F406430000-0x000001F406450000-memory.dmp
memory/5964-45-0x000001F4063F0000-0x000001F406410000-memory.dmp
memory/5964-41-0x000001F401B00000-0x000001F401B10000-memory.dmp
memory/5964-37-0x000001F4043A0000-0x000001F4043C0000-memory.dmp
memory/5964-33-0x000001F406370000-0x000001F4063F0000-memory.dmp
memory/5964-120-0x000001F40BC20000-0x000001F40BC70000-memory.dmp
memory/5964-13-0x000001F403F30000-0x000001F404160000-memory.dmp
memory/5964-9-0x000001F405340000-0x000001F4062A0000-memory.dmp
memory/5964-129-0x000001F40BD40000-0x000001F40BDB0000-memory.dmp
memory/5964-133-0x000001F40BE60000-0x000001F40BEC0000-memory.dmp
memory/5964-145-0x000001F40BFB0000-0x000001F40BFC0000-memory.dmp
memory/5964-141-0x000001F40BDB0000-0x000001F40BDF0000-memory.dmp
memory/5964-137-0x000001F40C760000-0x000001F40C7C0000-memory.dmp
memory/5964-149-0x000001F410650000-0x000001F410660000-memory.dmp
memory/5964-153-0x000001F410680000-0x000001F410690000-memory.dmp
memory/5964-157-0x000001F40BF10000-0x000001F40BF20000-memory.dmp