Analysis
- max time kernel
298s - max time network
302s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
- submitted
03/09/2026, 16:29
General
- Target launch.exe
- Size 436KB
- Sample260903-ty883a1ekf
- SHA256 cf2e58c30c7f01e7187f7d3af48a40e89c319556ecb0038652275a302bafee1d
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\launch.exe"C:\Users\Admin\AppData\Local\Temp\launch.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
__PSScriptPolicyTest_fevvef01.0tl.ps1
memory/5064-18-0x0000021D6A300000-0x0000021D6ADC2000-memory.dmp
memory/5064-21-0x0000021D6A300000-0x0000021D6ADC2000-memory.dmp
memory/5064-8-0x0000021D6A300000-0x0000021D6ADC2000-memory.dmp
memory/5064-0-0x0000021D6AACA000-0x0000021D6AACB000-memory.dmp
memory/5064-10-0x0000021D6D830000-0x0000021D6D876000-memory.dmp
memory/5064-11-0x0000021D6A300000-0x0000021D6ADC2000-memory.dmp
memory/5064-12-0x0000021D6A300000-0x0000021D6ADC2000-memory.dmp
memory/5064-13-0x0000021D6A300000-0x0000021D6ADC2000-memory.dmp
memory/5064-3-0x0000021D6B440000-0x0000021D6B462000-memory.dmp
memory/5064-16-0x0000021D6A300000-0x0000021D6ADC2000-memory.dmp
memory/5064-9-0x0000021D6A300000-0x0000021D6ADC2000-memory.dmp
memory/5064-23-0x0000021D6A300000-0x0000021D6ADC2000-memory.dmp
memory/5064-26-0x0000021D6A300000-0x0000021D6ADC2000-memory.dmp
memory/5064-29-0x0000021D6A300000-0x0000021D6ADC2000-memory.dmp
memory/5064-31-0x0000021D6A300000-0x0000021D6ADC2000-memory.dmp
memory/5064-34-0x0000021D6A300000-0x0000021D6ADC2000-memory.dmp
memory/5064-36-0x0000021D6A300000-0x0000021D6ADC2000-memory.dmp
memory/5064-39-0x0000021D6A300000-0x0000021D6ADC2000-memory.dmp
memory/5064-42-0x0000021D6A300000-0x0000021D6ADC2000-memory.dmp