Analysis
- user interaction
yes - max time kernel
26s - max time network
37s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
05/09/2026, 16:18
General
- Target AutoClicker.exe
- Size 1.1MB
- Sample260905-tr19wayake
- SHA256 1ce7da6f2813c2ad1d2e496be6714e08cd618e6d9fe2df26c2bd4d894c9a6ec1
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 2 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of SetWindowsHookEx 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\AutoClicker.exe"C:\Users\Admin\AppData\Local\Temp\AutoClicker.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
-
C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\Desktop\MergeEnable.docx" /o ""1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
-
C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\Desktop\MergeEnable.docx" /o ""1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1648-34-0x00007FFEAB500000-0x00007FFEAB510000-memory.dmp
memory/1648-33-0x00007FFEAB500000-0x00007FFEAB510000-memory.dmp
memory/1648-32-0x00007FFEAB500000-0x00007FFEAB510000-memory.dmp
memory/1648-31-0x00007FFEAB500000-0x00007FFEAB510000-memory.dmp
memory/5652-21-0x00007FFEEB3C0000-0x00007FFEEB623000-memory.dmp
memory/5652-22-0x00007FFEEB3C0000-0x00007FFEEB623000-memory.dmp
memory/5652-14-0x00007FFEEB3C0000-0x00007FFEEB623000-memory.dmp
memory/5652-13-0x00007FFEAB500000-0x00007FFEAB510000-memory.dmp
memory/5652-12-0x00007FFEAB500000-0x00007FFEAB510000-memory.dmp
memory/5652-16-0x00007FFEEB3C0000-0x00007FFEEB623000-memory.dmp
memory/5652-9-0x00007FFEAB500000-0x00007FFEAB510000-memory.dmp
memory/5652-20-0x00007FFEEB3C0000-0x00007FFEEB623000-memory.dmp
memory/5652-23-0x00007FFEEB3C0000-0x00007FFEEB623000-memory.dmp
memory/5652-15-0x00007FFEEB3C0000-0x00007FFEEB623000-memory.dmp
memory/5652-29-0x00007FFEA8BF0000-0x00007FFEA8C00000-memory.dmp
memory/5652-19-0x00007FFEEB3C0000-0x00007FFEEB623000-memory.dmp
memory/5652-18-0x00007FFEEB3C0000-0x00007FFEEB623000-memory.dmp
memory/5652-17-0x00007FFEA8BF0000-0x00007FFEA8C00000-memory.dmp
memory/5652-11-0x00007FFEEB3C0000-0x00007FFEEB623000-memory.dmp
memory/5652-7-0x00007FFEAB500000-0x00007FFEAB510000-memory.dmp
memory/5652-8-0x00007FFEAB500000-0x00007FFEAB510000-memory.dmp
memory/5652-10-0x00007FFEEB51F000-0x00007FFEEB520000-memory.dmp
memory/5652-56-0x00007FFEEB3C0000-0x00007FFEEB623000-memory.dmp