Analysis

  • max time kernel
    151s
  • max time network
    116s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    26/08/2026, 18:00

General

  • Target
    vector.exe
  • Size 49.0MB
  • Sample260826-wljtraef28
  • SHA256 13e64efd78ae303dfe7f6497d405bc9c597dd434d8236ee4425bda3ab3dc46cb
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 8 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\vector.exe
    "C:\Users\Admin\AppData\Local\Temp\vector.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3960

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/3960-0-0x00007FF6F1DD9000-0x00007FF6F3C67000-memory.dmp

        memory/3960-2-0x00007FF847900000-0x00007FF847902000-memory.dmp

        memory/3960-1-0x00007FF8478F0000-0x00007FF8478F2000-memory.dmp

        memory/3960-3-0x00007FF6F1AE0000-0x00007FF6F6D73000-memory.dmp

        memory/3960-20-0x0000024FD1710000-0x0000024FD1711000-memory.dmp

        memory/3960-23-0x0000024FD1740000-0x0000024FD1741000-memory.dmp

        memory/3960-22-0x0000024FD1730000-0x0000024FD1731000-memory.dmp

        memory/3960-19-0x0000024FD1700000-0x0000024FD1701000-memory.dmp

        memory/3960-17-0x0000024FD16E0000-0x0000024FD16E1000-memory.dmp

        memory/3960-14-0x0000024FD16B0000-0x0000024FD16B1000-memory.dmp

        memory/3960-13-0x0000024FD16A0000-0x0000024FD16A1000-memory.dmp

        memory/3960-12-0x0000024FD1690000-0x0000024FD1691000-memory.dmp

        memory/3960-11-0x0000024FD1680000-0x0000024FD1681000-memory.dmp

        memory/3960-10-0x0000024FD1660000-0x0000024FD1661000-memory.dmp

        memory/3960-9-0x0000024FD1650000-0x0000024FD1651000-memory.dmp

        memory/3960-8-0x0000024FD1640000-0x0000024FD1641000-memory.dmp

        memory/3960-18-0x0000024FD16F0000-0x0000024FD16F1000-memory.dmp

        memory/3960-16-0x0000024FD16D0000-0x0000024FD16D1000-memory.dmp

        memory/3960-15-0x0000024FD16C0000-0x0000024FD16C1000-memory.dmp

        memory/3960-7-0x0000024FD1630000-0x0000024FD1631000-memory.dmp

        memory/3960-21-0x0000024FD1720000-0x0000024FD1721000-memory.dmp

        memory/3960-24-0x00007FF6F1AE0000-0x00007FF6F6D73000-memory.dmp

        memory/3960-25-0x00007FF6F1DD9000-0x00007FF6F3C67000-memory.dmp

        memory/3960-26-0x00007FF6F1AE0000-0x00007FF6F6D73000-memory.dmp

        memory/3960-27-0x00007FF6F1AE0000-0x00007FF6F6D73000-memory.dmp

        memory/3960-28-0x00007FF6F1AE0000-0x00007FF6F6D73000-memory.dmp

        memory/3960-29-0x00007FF6F1AE0000-0x00007FF6F6D73000-memory.dmp

        memory/3960-30-0x00007FF6F1AE0000-0x00007FF6F6D73000-memory.dmp

        memory/3960-31-0x00007FF6F1AE0000-0x00007FF6F6D73000-memory.dmp

        memory/3960-32-0x00007FF6F1AE0000-0x00007FF6F6D73000-memory.dmp

        memory/3960-33-0x00007FF6F1AE0000-0x00007FF6F6D73000-memory.dmp

        memory/3960-34-0x00007FF6F1AE0000-0x00007FF6F6D73000-memory.dmp

        memory/3960-35-0x00007FF6F1AE0000-0x00007FF6F6D73000-memory.dmp

        memory/3960-36-0x00007FF6F1AE0000-0x00007FF6F6D73000-memory.dmp

        memory/3960-37-0x00007FF6F1AE0000-0x00007FF6F6D73000-memory.dmp

        memory/3960-38-0x00007FF6F1AE0000-0x00007FF6F6D73000-memory.dmp