Analysis
- max time kernel
149s - max time network
147s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
29/08/2026, 00:02
General
- Target file.exe
- Size 10.7MB
- Sample260829-ablppsvapb
- SHA256 f9b347986b885a1bb954b4b8feef920f3602eaae2059c36db9b8d847973e4b8e
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
- Suspicious behavior: EnumeratesProcesses 1 IoCs
- Suspicious use of AdjustPrivilegeToken 64 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\file.exe"C:\Users\Admin\AppData\Local\Temp\file.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Microsoft\updater_VjogPFvI.exeC:\Users\Admin\AppData\Local\Microsoft\updater_VjogPFvI.exe2⤵
- Executes dropped EXE
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
updater_VjogPFvI.exe
__PSScriptPolicyTest_jd3a35bz.4fn.ps1
memory/3940-15-0x000001BC37B20000-0x000001BC37C20000-memory.dmp
memory/3940-11-0x000001BC1D570000-0x000001BC1D578000-memory.dmp
memory/3940-8-0x000001BC1D500000-0x000001BC1D510000-memory.dmp
memory/3940-7-0x000001BC1D500000-0x000001BC1D510000-memory.dmp
memory/3940-9-0x000001BC1D500000-0x000001BC1D510000-memory.dmp
memory/3940-10-0x000001BC1D500000-0x000001BC1D510000-memory.dmp
memory/3940-16-0x000001BC1E1E0000-0x000001BC1E202000-memory.dmp
memory/3940-12-0x000001BC1D590000-0x000001BC1D598000-memory.dmp
memory/3940-13-0x000001BC1D570000-0x000001BC1D57A000-memory.dmp
memory/3940-14-0x000001BC1D5A0000-0x000001BC1D5AA000-memory.dmp
memory/3940-6-0x000001BC38150000-0x000001BC38778000-memory.dmp
memory/3940-5-0x000001BC1D500000-0x000001BC1D510000-memory.dmp
memory/3940-22-0x000001BC1D500000-0x000001BC1D510000-memory.dmp
memory/3940-18-0x000001BC1D500000-0x000001BC1D510000-memory.dmp
memory/3940-20-0x000001BC1D500000-0x000001BC1D510000-memory.dmp
memory/3940-19-0x000001BC1D500000-0x000001BC1D510000-memory.dmp
memory/3940-17-0x000001BC1D500000-0x000001BC1D510000-memory.dmp
memory/3940-21-0x000001BC1D500000-0x000001BC1D510000-memory.dmp
memory/3940-23-0x000001BC37B20000-0x000001BC37C20000-memory.dmp
memory/3940-27-0x000001BC37B20000-0x000001BC37C20000-memory.dmp
memory/3940-28-0x000001BC37B20000-0x000001BC37C20000-memory.dmp
memory/3940-4-0x000001BC1D500000-0x000001BC1D510000-memory.dmp
memory/3940-42-0x00007FFBECF20000-0x00007FFBECFA0000-memory.dmp
memory/3940-44-0x00007FFBECF20000-0x00007FFBECFA0000-memory.dmp