Analysis
- max time kernel
150s - max time network
158s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
31/08/2026, 04:50
General
- Target 95ad7e3d5c15a7062147fe6f45848ad1cf7cd39e5de90ce0fbd6e0abad86217e.exe
- Size 70.0MB
- Sample260831-fgqthavemc
- SHA256 95ad7e3d5c15a7062147fe6f45848ad1cf7cd39e5de90ce0fbd6e0abad86217e
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 1 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\95ad7e3d5c15a7062147fe6f45848ad1cf7cd39e5de90ce0fbd6e0abad86217e.exe"C:\Users\Admin\AppData\Local\Temp\95ad7e3d5c15a7062147fe6f45848ad1cf7cd39e5de90ce0fbd6e0abad86217e.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2088-6-0x0000026D01300000-0x0000026D01F90000-memory.dmp
memory/2088-10-0x0000026D02480000-0x0000026D02680000-memory.dmp
memory/2088-18-0x0000026D00630000-0x0000026D00660000-memory.dmp
memory/2088-30-0x0000026D02730000-0x0000026D02750000-memory.dmp
memory/2088-26-0x0000026D02230000-0x0000026D02270000-memory.dmp
memory/2088-22-0x0000026D005E0000-0x0000026D00600000-memory.dmp
memory/2088-14-0x0000026D005A0000-0x0000026D005C0000-memory.dmp
memory/2088-34-0x0000026D02750000-0x0000026D02770000-memory.dmp
memory/2088-38-0x0000026D027A0000-0x0000026D027C0000-memory.dmp
memory/2088-50-0x0000026D045C0000-0x0000026D045D0000-memory.dmp
memory/2088-46-0x0000026D04780000-0x0000026D04810000-memory.dmp
memory/2088-42-0x0000026D04650000-0x0000026D046A0000-memory.dmp
memory/2088-54-0x0000026D048A0000-0x0000026D04930000-memory.dmp
memory/2088-58-0x0000026D046A0000-0x0000026D046E0000-memory.dmp
memory/2088-62-0x0000026D04A80000-0x0000026D04B30000-memory.dmp