Analysis
- max time kernel
149s - max time network
131s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
- submitted
31/08/2026, 13:27
General
- Target 1316ef4e45b4d805d8ab12f589d0390df3554a05f1ea24ee38040121f0f2c237.exe
- Size 8.9MB
- Sample260831-qqcncavzhy
- SHA256 1316ef4e45b4d805d8ab12f589d0390df3554a05f1ea24ee38040121f0f2c237
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\1316ef4e45b4d805d8ab12f589d0390df3554a05f1ea24ee38040121f0f2c237.exe"C:\Users\Admin\AppData\Local\Temp\1316ef4e45b4d805d8ab12f589d0390df3554a05f1ea24ee38040121f0f2c237.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3036-0-0x00007FFA0545F000-0x00007FFA05460000-memory.dmp
memory/3036-1-0x0000000000610000-0x0000000000F00000-memory.dmp
memory/3036-2-0x00007FFA052D0000-0x00007FFA05C74000-memory.dmp
memory/3036-3-0x00007FFA052D0000-0x00007FFA05C74000-memory.dmp
memory/3036-4-0x00007FFA052D0000-0x00007FFA05C74000-memory.dmp
memory/3036-5-0x00007FFA052D0000-0x00007FFA05C74000-memory.dmp
memory/3036-6-0x00007FFA052D0000-0x00007FFA05C74000-memory.dmp
memory/3036-7-0x00007FFA052D0000-0x00007FFA05C74000-memory.dmp
memory/3036-8-0x00007FFA052D0000-0x00007FFA05C74000-memory.dmp
memory/3036-11-0x000000001BD40000-0x000000001BD4E000-memory.dmp
memory/3036-10-0x000000001BD70000-0x000000001BDAE000-memory.dmp
memory/3036-9-0x00007FFA052D0000-0x00007FFA05C74000-memory.dmp
memory/3036-12-0x00007FFA052D0000-0x00007FFA05C74000-memory.dmp
memory/3036-13-0x00007FFA052D0000-0x00007FFA05C74000-memory.dmp
memory/3036-14-0x00007FFA052D0000-0x00007FFA05C74000-memory.dmp