Analysis
- max time kernel
298s - max time network
189s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
03/09/2026, 16:29
General
- Target launch.exe
- Size 436KB
- Sample260903-ty883a1ekf
- SHA256 cf2e58c30c7f01e7187f7d3af48a40e89c319556ecb0038652275a302bafee1d
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\launch.exe"C:\Users\Admin\AppData\Local\Temp\launch.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2496-0-0x00007FFD60BFF000-0x00007FFD60C00000-memory.dmp
memory/2496-3-0x00007FFD60A70000-0x00007FFD61414000-memory.dmp
memory/2496-4-0x000001177FE90000-0x000001177FEB2000-memory.dmp
memory/2496-5-0x00007FFD60A70000-0x00007FFD61414000-memory.dmp
memory/2496-6-0x00007FFD60A70000-0x00007FFD61414000-memory.dmp
memory/2496-7-0x00007FFD60A70000-0x00007FFD61414000-memory.dmp
memory/2496-8-0x00007FFD60A70000-0x00007FFD61414000-memory.dmp
memory/2496-9-0x000001177FF10000-0x000001177FF58000-memory.dmp
memory/2496-10-0x00007FFD60A70000-0x00007FFD61414000-memory.dmp
memory/2496-11-0x00007FFD60A70000-0x00007FFD61414000-memory.dmp
memory/2496-12-0x00007FFD60A70000-0x00007FFD61414000-memory.dmp
memory/2496-13-0x00007FFD60A70000-0x00007FFD61414000-memory.dmp
memory/2496-15-0x00007FFD60A70000-0x00007FFD61414000-memory.dmp
memory/2496-16-0x00007FFD60A70000-0x00007FFD61414000-memory.dmp
memory/2496-17-0x00007FFD60A70000-0x00007FFD61414000-memory.dmp