Analysis
- max time kernel
900s - max time network
462s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-fr - resource tags
- submitted
27/08/2026, 11:16
General
- Target Application.exe
- Size 59.8MB
- Sample260827-nc4tkaswes
- SHA256 9c5842dcf462448a59998c478b1fa60e4719e234572cca6e00238faf5c088890
Malware Config
Signatures
- Loads dropped DLL 5 IoCs
- Suspicious behavior: RenamesItself 1 IoCs
- Suspicious use of AdjustPrivilegeToken 2 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Application.exe"C:\Users\Admin\AppData\Local\Temp\Application.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\78ca2059.exe"C:\Users\Admin\AppData\Local\Temp\78ca2059.exe"2⤵
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
D3DCompiler_47_cor3.dll
wpfgfx_cor3.dll
PresentationNative_cor3.dll
vcruntime140_cor3.dll
memory/1256-398-0x000001C71E120000-0x000001C71E130000-memory.dmp
memory/1256-382-0x000001C722FD0000-0x000001C723130000-memory.dmp
memory/1256-386-0x000001C71DB20000-0x000001C71DB30000-memory.dmp
memory/1256-366-0x000001C71D930000-0x000001C71D940000-memory.dmp
memory/1256-362-0x000001C71DBF0000-0x000001C71DC60000-memory.dmp
memory/1256-354-0x000001C71DAD0000-0x000001C71DB20000-memory.dmp
memory/3724-132-0x0000020619530000-0x0000020619560000-memory.dmp
memory/3724-116-0x00000206188A0000-0x0000020618900000-memory.dmp
memory/3724-84-0x0000020617C40000-0x00000206183B0000-memory.dmp
memory/3724-88-0x0000020616F50000-0x0000020616F80000-memory.dmp
memory/3724-78-0x0000020617080000-0x0000020617180000-memory.dmp
memory/3724-112-0x0000020617440000-0x0000020617460000-memory.dmp
memory/3724-108-0x00000206187B0000-0x00000206187F0000-memory.dmp
memory/3724-104-0x0000020617290000-0x00000206172A0000-memory.dmp
memory/3724-100-0x0000020617250000-0x0000020617270000-memory.dmp
memory/3724-97-0x0000020617360000-0x0000020617420000-memory.dmp
memory/3724-92-0x00000206171E0000-0x0000020617200000-memory.dmp
memory/3724-61-0x0000020613E00000-0x0000020613E20000-memory.dmp
memory/3724-57-0x0000020613DC0000-0x0000020613DE0000-memory.dmp
memory/3724-53-0x0000020613DA0000-0x0000020613DC0000-memory.dmp
memory/3724-34-0x0000020614750000-0x0000020614F40000-memory.dmp
memory/3724-49-0x0000020613C30000-0x0000020613C50000-memory.dmp
memory/3724-41-0x0000020613CD0000-0x0000020613D50000-memory.dmp
memory/3724-9-0x0000020612950000-0x0000020613870000-memory.dmp
memory/3724-5-0x0000020647110000-0x0000020648060000-memory.dmp
memory/3724-128-0x0000020619480000-0x0000020619530000-memory.dmp
memory/3724-136-0x00000206198E0000-0x0000020619B50000-memory.dmp
memory/3724-124-0x0000020618940000-0x0000020618950000-memory.dmp
memory/3724-120-0x0000020618800000-0x0000020618840000-memory.dmp
memory/3724-80-0x0000020613EF0000-0x0000020613F40000-memory.dmp
memory/3724-141-0x0000020619560000-0x0000020619660000-memory.dmp
memory/3724-144-0x0000020619ED0000-0x000002061A080000-memory.dmp
memory/3724-148-0x000002061A330000-0x000002061A500000-memory.dmp
memory/3724-152-0x000002061A080000-0x000002061A100000-memory.dmp
memory/3724-156-0x000002061A5B0000-0x000002061A650000-memory.dmp
memory/3724-160-0x0000020619C70000-0x0000020619C90000-memory.dmp
memory/3724-164-0x000002061A130000-0x000002061A160000-memory.dmp
memory/3724-168-0x000002061AA90000-0x000002061AB10000-memory.dmp
memory/3724-172-0x000002061A9D0000-0x000002061A9F0000-memory.dmp
memory/3724-180-0x000002061AB90000-0x000002061ABB0000-memory.dmp
memory/3724-176-0x000002061AB30000-0x000002061AB60000-memory.dmp
memory/3724-184-0x000002061AC90000-0x000002061ACD0000-memory.dmp
memory/3724-188-0x000002061AC20000-0x000002061AC50000-memory.dmp
memory/3724-69-0x0000020613EC0000-0x0000020613EE0000-memory.dmp
memory/3724-200-0x00007FF793210000-0x00007FF793BAB000-memory.dmp
memory/3724-65-0x0000020613E90000-0x0000020613EC0000-memory.dmp
memory/3724-15-0x0000020648370000-0x0000020648590000-memory.dmp
memory/3724-21-0x0000020613A50000-0x0000020613AA0000-memory.dmp
memory/3724-25-0x0000020613AE0000-0x0000020613B20000-memory.dmp
memory/3724-29-0x0000020613BB0000-0x0000020613C00000-memory.dmp
memory/3724-37-0x00000206139D0000-0x00000206139F0000-memory.dmp
memory/3724-45-0x00000206139F0000-0x0000020613A00000-memory.dmp
memory/3724-17-0x0000020613870000-0x00000206139D0000-memory.dmp