Analysis
- max time kernel
149s - max time network
155s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
31/08/2026, 12:13
General
- Target invoice and packing list.exe
- Size 1.0MB
- Sample260831-pdt67a1elf
- SHA256 fb0889110aec73085c455f345f4f920d68aec7ae70f84867c57c9ca0e49b9564
Malware Config
Signatures
- .NET Reactor proctector 64 IoCs
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
- Suspicious use of SetThreadContext 1 IoCs
- System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious behavior: EnumeratesProcesses 5 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
- Suspicious use of WriteProcessMemory 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\invoice and packing list.exe"C:\Users\Admin\AppData\Local\Temp\invoice and packing list.exe"1⤵
- Suspicious use of SetThreadContext
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe"2⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1920-0-0x0000000074432000-0x0000000074433000-memory.dmp
memory/1920-1-0x0000000000DD0000-0x0000000000EDC000-memory.dmp
memory/1920-2-0x0000000005F50000-0x000000000650A000-memory.dmp
memory/1920-3-0x0000000005A30000-0x0000000005AC2000-memory.dmp
memory/1920-4-0x0000000005AD0000-0x0000000005B6C000-memory.dmp
memory/1920-5-0x0000000074420000-0x0000000074BDC000-memory.dmp
memory/1920-6-0x0000000005B70000-0x0000000005BD8000-memory.dmp
memory/1920-38-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-54-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-48-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-132-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-130-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-128-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-126-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-124-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-122-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-120-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-118-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-116-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-114-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-112-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-110-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-108-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-107-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-102-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-100-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-98-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-96-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-90-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-88-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-86-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-84-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-80-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-78-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-76-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-74-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-72-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-68-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-66-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-64-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-62-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-60-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-56-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-52-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-50-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-47-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-44-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-42-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-40-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-36-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-34-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-32-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-26-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-22-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-18-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-16-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-14-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-104-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-12-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-94-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-92-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-82-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-70-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-8-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-7-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-58-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-31-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-28-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-24-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-20-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-10-0x0000000005B70000-0x0000000005BDB000-memory.dmp
memory/1920-551-0x0000000074420000-0x0000000074BDC000-memory.dmp
memory/1920-552-0x0000000005C70000-0x0000000005C7A000-memory.dmp
memory/1920-553-0x0000000006560000-0x0000000006588000-memory.dmp
memory/1920-554-0x0000000074420000-0x0000000074BDC000-memory.dmp
memory/1920-555-0x0000000074432000-0x0000000074433000-memory.dmp
memory/1920-556-0x0000000008980000-0x00000000089A8000-memory.dmp
memory/1920-681-0x0000000074420000-0x0000000074BDC000-memory.dmp
memory/1920-682-0x0000000074420000-0x0000000074BDC000-memory.dmp
memory/1920-687-0x0000000074420000-0x0000000074BDC000-memory.dmp