Analysis
- user interaction
yes - max time kernel
899s - max time network
437s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
31/08/2026, 11:13
General
- Target vector.exe
- Size 43.3MB
- Sample260831-nbv52azhmf
- SHA256 01b5cce6c822e9d606380659644f129e2b78f0a18b9beb98e813d552ea96467a
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 8 IoCs
- Suspicious behavior: EnumeratesProcesses 64 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\vector.exe"C:\Users\Admin\AppData\Local\Temp\vector.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5472-0-0x00007FF705BD8000-0x00007FF7076E6000-memory.dmp
memory/5472-2-0x00007FFCE82C0000-0x00007FFCE82C2000-memory.dmp
memory/5472-1-0x00007FFCE82B0000-0x00007FFCE82B2000-memory.dmp
memory/5472-7-0x00007FF7058E0000-0x00007FF70A235000-memory.dmp
memory/5472-8-0x00007FF7058E0000-0x00007FF70A235000-memory.dmp
memory/5472-15-0x000002373AB60000-0x000002373AB61000-memory.dmp
memory/5472-25-0x000002373AC20000-0x000002373AC21000-memory.dmp
memory/5472-24-0x000002373AC10000-0x000002373AC11000-memory.dmp
memory/5472-23-0x000002373ABF0000-0x000002373ABF1000-memory.dmp
memory/5472-22-0x000002373ABE0000-0x000002373ABE1000-memory.dmp
memory/5472-21-0x000002373ABC0000-0x000002373ABC1000-memory.dmp
memory/5472-20-0x000002373ABB0000-0x000002373ABB1000-memory.dmp
memory/5472-19-0x000002373ABA0000-0x000002373ABA1000-memory.dmp
memory/5472-18-0x000002373AB90000-0x000002373AB91000-memory.dmp
memory/5472-17-0x000002373AB80000-0x000002373AB81000-memory.dmp
memory/5472-16-0x000002373AB70000-0x000002373AB71000-memory.dmp
memory/5472-14-0x000002373AB50000-0x000002373AB51000-memory.dmp
memory/5472-13-0x000002373AB40000-0x000002373AB41000-memory.dmp
memory/5472-12-0x000002373AB30000-0x000002373AB31000-memory.dmp
memory/5472-11-0x000002373AB20000-0x000002373AB21000-memory.dmp
memory/5472-10-0x000002373AB10000-0x000002373AB11000-memory.dmp
memory/5472-9-0x000002373AB00000-0x000002373AB01000-memory.dmp
memory/5472-26-0x00007FF7058E0000-0x00007FF70A235000-memory.dmp
memory/5472-27-0x00007FF705BD8000-0x00007FF7076E6000-memory.dmp
memory/5472-28-0x00007FF7058E0000-0x00007FF70A235000-memory.dmp
memory/5472-29-0x00007FF7058E0000-0x00007FF70A235000-memory.dmp
memory/5472-30-0x00007FF7058E0000-0x00007FF70A235000-memory.dmp
memory/5472-31-0x00007FF7058E0000-0x00007FF70A235000-memory.dmp
memory/5472-32-0x00007FF7058E0000-0x00007FF70A235000-memory.dmp
memory/5472-33-0x00007FF7058E0000-0x00007FF70A235000-memory.dmp
memory/5472-34-0x00007FF7058E0000-0x00007FF70A235000-memory.dmp
memory/5472-35-0x00007FF7058E0000-0x00007FF70A235000-memory.dmp
memory/5472-36-0x00007FF7058E0000-0x00007FF70A235000-memory.dmp
memory/5472-37-0x00007FF7058E0000-0x00007FF70A235000-memory.dmp
memory/5472-38-0x00007FF7058E0000-0x00007FF70A235000-memory.dmp
memory/5472-39-0x00007FF7058E0000-0x00007FF70A235000-memory.dmp
memory/5472-40-0x00007FF7058E0000-0x00007FF70A235000-memory.dmp
memory/5472-41-0x00007FF7058E0000-0x00007FF70A235000-memory.dmp
memory/5472-42-0x00007FF7058E0000-0x00007FF70A235000-memory.dmp
memory/5472-43-0x00007FF7058E0000-0x00007FF70A235000-memory.dmp
memory/5472-44-0x00007FF7058E0000-0x00007FF70A235000-memory.dmp
memory/5472-45-0x00007FF7058E0000-0x00007FF70A235000-memory.dmp
memory/5472-46-0x00007FF7058E0000-0x00007FF70A235000-memory.dmp
memory/5472-47-0x00007FF7058E0000-0x00007FF70A235000-memory.dmp