Analysis
- max time kernel
300s - max time network
260s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260513-en - resource tags
- submitted
03/09/2026, 16:29
General
- Target launch.exe
- Size 436KB
- Sample260903-ty883a1ekf
- SHA256 cf2e58c30c7f01e7187f7d3af48a40e89c319556ecb0038652275a302bafee1d
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\launch.exe"C:\Users\Admin\AppData\Local\Temp\launch.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
__PSScriptPolicyTest_4iqghecj.whu.ps1
memory/4436-1-0x00000229B07A0000-0x00000229B07B0000-memory.dmp
memory/4436-0-0x00000229B07A0000-0x00000229B07B0000-memory.dmp
memory/4436-2-0x00000229B29C0000-0x00000229B29E2000-memory.dmp
memory/4436-10-0x00000229B2DC0000-0x00000229B2E04000-memory.dmp
memory/4436-11-0x00000229B07A0000-0x00000229B07B0000-memory.dmp
memory/4436-12-0x00000229B3230000-0x00000229B32A6000-memory.dmp
memory/4436-14-0x00000229B07A0000-0x00000229B07B0000-memory.dmp
memory/4436-13-0x00000229B07A0000-0x00000229B07B0000-memory.dmp
memory/4436-16-0x00000229B07A0000-0x00000229B07B0000-memory.dmp
memory/4436-15-0x00000229B29F0000-0x00000229B2C0D000-memory.dmp