Analysis
- max time kernel
149s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
26/08/2026, 16:27
General
- Target cd24a5cb4542f6037721d7bcae478854464d737867c0eb8c682a22adad3204b9.dll
- Size 805KB
- Sample260826-tyaeqssdpc
- SHA256 cd24a5cb4542f6037721d7bcae478854464d737867c0eb8c682a22adad3204b9
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 8 IoCs
- Suspicious use of AdjustPrivilegeToken 3 IoCs
- Suspicious use of WriteProcessMemory 6 IoCs
Processes
-
C:\Windows\system32\sihost.exesihost.exe1⤵
- Suspicious behavior: EnumeratesProcesses
-
C:\Windows\system32\taskhostw.exetaskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}1⤵
- Suspicious behavior: EnumeratesProcesses
-
C:\Windows\system32\DllHost.exeC:\Windows\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}1⤵
- Suspicious behavior: EnumeratesProcesses
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\cd24a5cb4542f6037721d7bcae478854464d737867c0eb8c682a22adad3204b9.dll1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
icsvcext.dll
memory/372-0-0x00007FFC9A848000-0x00007FFC9A849000-memory.dmp
memory/372-1-0x00007FFC9A820000-0x00007FFC9A8FB000-memory.dmp
memory/372-3-0x00007FFC9A820000-0x00007FFC9A8FB000-memory.dmp
memory/372-2-0x00007FFC9A820000-0x00007FFC9A8FB000-memory.dmp
memory/372-4-0x00007FFC9A820000-0x00007FFC9A8FB000-memory.dmp
memory/372-5-0x00007FFC9A820000-0x00007FFC9A8FB000-memory.dmp
memory/372-6-0x00007FFC9A820000-0x00007FFC9A8FB000-memory.dmp
memory/668-17-0x0000021930070000-0x000002193014B000-memory.dmp
memory/668-51-0x0000021930070000-0x000002193014B000-memory.dmp
memory/668-69-0x0000021930070000-0x000002193014B000-memory.dmp
memory/668-67-0x0000021930070000-0x000002193014B000-memory.dmp
memory/668-7-0x000002192FED0000-0x0000021930063000-memory.dmp
memory/668-65-0x0000021930070000-0x000002193014B000-memory.dmp
memory/668-49-0x0000021930070000-0x000002193014B000-memory.dmp
memory/668-63-0x0000021930070000-0x000002193014B000-memory.dmp
memory/668-59-0x0000021930070000-0x000002193014B000-memory.dmp
memory/668-61-0x0000021930070000-0x000002193014B000-memory.dmp
memory/668-10-0x0000021930070000-0x000002193014B000-memory.dmp
memory/668-11-0x0000021930070000-0x000002193014B000-memory.dmp
memory/668-57-0x0000021930070000-0x000002193014B000-memory.dmp
memory/668-12-0x0000021930070000-0x000002193014B000-memory.dmp
memory/668-55-0x0000021930070000-0x000002193014B000-memory.dmp
memory/668-53-0x0000021930070000-0x000002193014B000-memory.dmp
memory/668-13-0x0000021930070000-0x000002193014B000-memory.dmp
memory/668-31-0x0000021930070000-0x000002193014B000-memory.dmp
memory/668-15-0x0000021930070000-0x000002193014B000-memory.dmp
memory/668-19-0x0000021930070000-0x000002193014B000-memory.dmp
memory/668-47-0x0000021930070000-0x000002193014B000-memory.dmp
memory/668-45-0x0000021930070000-0x000002193014B000-memory.dmp
memory/668-21-0x0000021930070000-0x000002193014B000-memory.dmp
memory/668-43-0x0000021930070000-0x000002193014B000-memory.dmp
memory/668-23-0x0000021930070000-0x000002193014B000-memory.dmp
memory/668-41-0x0000021930070000-0x000002193014B000-memory.dmp
memory/668-33-0x0000021930070000-0x000002193014B000-memory.dmp
memory/668-39-0x0000021930070000-0x000002193014B000-memory.dmp
memory/668-37-0x0000021930070000-0x000002193014B000-memory.dmp
memory/668-27-0x0000021930070000-0x000002193014B000-memory.dmp
memory/668-35-0x0000021930070000-0x000002193014B000-memory.dmp
memory/668-29-0x0000021930070000-0x000002193014B000-memory.dmp
memory/668-25-0x0000021930070000-0x000002193014B000-memory.dmp
memory/2180-70-0x0000026ABD9A0000-0x0000026ABDA7B000-memory.dmp
memory/2180-16-0x0000026ABD9A0000-0x0000026ABDA7B000-memory.dmp
memory/2180-30-0x0000026ABD9A0000-0x0000026ABDA7B000-memory.dmp
memory/2180-32-0x0000026ABD9A0000-0x0000026ABDA7B000-memory.dmp
memory/2180-28-0x0000026ABD9A0000-0x0000026ABDA7B000-memory.dmp
memory/2180-36-0x0000026ABD9A0000-0x0000026ABDA7B000-memory.dmp
memory/2180-26-0x0000026ABD9A0000-0x0000026ABDA7B000-memory.dmp
memory/2180-40-0x0000026ABD9A0000-0x0000026ABDA7B000-memory.dmp
memory/2180-24-0x0000026ABD9A0000-0x0000026ABDA7B000-memory.dmp
memory/2180-42-0x0000026ABD9A0000-0x0000026ABDA7B000-memory.dmp
memory/2180-22-0x0000026ABD9A0000-0x0000026ABDA7B000-memory.dmp
memory/2180-44-0x0000026ABD9A0000-0x0000026ABDA7B000-memory.dmp
memory/2180-20-0x0000026ABD9A0000-0x0000026ABDA7B000-memory.dmp
memory/2180-48-0x0000026ABD9A0000-0x0000026ABDA7B000-memory.dmp
memory/2180-66-0x0000026ABD9A0000-0x0000026ABDA7B000-memory.dmp
memory/2180-34-0x0000026ABD9A0000-0x0000026ABDA7B000-memory.dmp
memory/2180-50-0x0000026ABD9A0000-0x0000026ABDA7B000-memory.dmp
memory/2180-14-0x0000026ABD9A0000-0x0000026ABDA7B000-memory.dmp
memory/2180-52-0x0000026ABD9A0000-0x0000026ABDA7B000-memory.dmp
memory/2180-56-0x0000026ABD9A0000-0x0000026ABDA7B000-memory.dmp
memory/2180-58-0x0000026ABD9A0000-0x0000026ABDA7B000-memory.dmp
memory/2180-60-0x0000026ABD9A0000-0x0000026ABDA7B000-memory.dmp
memory/2180-68-0x0000026ABD9A0000-0x0000026ABDA7B000-memory.dmp
memory/2180-62-0x0000026ABD9A0000-0x0000026ABDA7B000-memory.dmp
memory/2180-54-0x0000026ABD9A0000-0x0000026ABDA7B000-memory.dmp
memory/2180-64-0x0000026ABD9A0000-0x0000026ABDA7B000-memory.dmp
memory/2180-46-0x0000026ABD9A0000-0x0000026ABDA7B000-memory.dmp
memory/2180-38-0x0000026ABD9A0000-0x0000026ABDA7B000-memory.dmp
memory/2180-18-0x0000026ABD9A0000-0x0000026ABDA7B000-memory.dmp
memory/2180-8-0x0000026ABD800000-0x0000026ABD993000-memory.dmp
memory/3620-9-0x000001AB640A0000-0x000001AB64233000-memory.dmp