Analysis
- max time kernel
2s - max time network
6s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
07/09/2026, 02:49
Errors
General
- Target AngryVirus.exe
- Size 482KB
- Sample260907-dbdkwaxdnh
- SHA256 b6dac480e4c7f15e8de6633ee9b52b3bda0b6b2f1897a76ddb4ab0ffb76b2588
Malware Config
Signatures
- Scheduled Task/Job: Scheduled Task 1 TTPs 1 IoCs
Schtasks is often used by malware for persistence or to perform post-infection execution.
Processes
-
C:\Users\Admin\AppData\Local\Temp\AngryVirus.exe"C:\Users\Admin\AppData\Local\Temp\AngryVirus.exe"1⤵
-
C:\Windows\System32\schtasks.exe"C:\Windows\System32\schtasks.exe" /Create /F /TN "MasonMBR" /SC ONLOGON /TR "C:\Users\Admin\AppData\Local\Temp\\MasonMBR.exe" /RL HIGHEST2⤵
- Scheduled Task/Job: Scheduled Task
-
-
C:\Users\Admin\AppData\Local\Temp\MasonMBR-S.exe"C:\Users\Admin\AppData\Local\Temp\MasonMBR-S.exe"2⤵
-
-
C:\Users\Admin\AppData\Local\Temp\MasonGDI.exe"C:\Users\Admin\AppData\Local\Temp\MasonGDI.exe"2⤵
-
-
C:\Users\Admin\AppData\Local\Temp\MasonRootkit.exe"C:\Users\Admin\AppData\Local\Temp\MasonRootkit.exe"2⤵
-
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x00000000000004F0 0x00000000000005081⤵
-
C:\Users\Admin\AppData\Local\Temp\MasonMBR.exeC:\Users\Admin\AppData\Local\Temp\\MasonMBR.exe1⤵
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
MasonGDI.exe
MasonMBR-S.exe
MasonMBR.exe
MasonRootkit.exe
memory/472-31-0x0000000000AA0000-0x0000000000AB4000-memory.dmp
memory/472-33-0x00007FFBCBBE0000-0x00007FFBCC584000-memory.dmp
memory/732-42-0x000002AB09700000-0x000002AB09725000-memory.dmp
memory/732-47-0x00007FFBAEB80000-0x00007FFBAEB90000-memory.dmp
memory/732-46-0x000002AB09730000-0x000002AB0975B000-memory.dmp
memory/856-96-0x000001FD838E0000-0x000001FD8390B000-memory.dmp
memory/856-97-0x00007FFBAEB80000-0x00007FFBAEB90000-memory.dmp
memory/984-92-0x00007FFBAEB80000-0x00007FFBAEB90000-memory.dmp
memory/984-91-0x000001BFA7CA0000-0x000001BFA7CCB000-memory.dmp
memory/992-94-0x00007FFBAEB80000-0x00007FFBAEB90000-memory.dmp
memory/992-51-0x00000246771B0000-0x00000246771DB000-memory.dmp
memory/1004-59-0x00000285CF660000-0x00000285CF68B000-memory.dmp
memory/1004-61-0x00007FFBAEB80000-0x00007FFBAEB90000-memory.dmp
memory/1124-99-0x000001B778280000-0x000001B7782AB000-memory.dmp
memory/1124-100-0x00007FFBAEB80000-0x00007FFBAEB90000-memory.dmp
memory/1176-55-0x00000212612A0000-0x00000212612CB000-memory.dmp
memory/1176-56-0x00007FFBAEB80000-0x00007FFBAEB90000-memory.dmp
memory/1224-103-0x00007FFBAEB80000-0x00007FFBAEB90000-memory.dmp
memory/1224-102-0x000001FD77FC0000-0x000001FD77FEB000-memory.dmp
memory/1264-4-0x00007FFBCBBE0000-0x00007FFBCC584000-memory.dmp
memory/1264-308-0x00007FFBCBBE0000-0x00007FFBCC584000-memory.dmp
memory/1264-5-0x00007FFBCBBE0000-0x00007FFBCC584000-memory.dmp
memory/1264-0-0x00007FFBCBD6F000-0x00007FFBCBD70000-memory.dmp
memory/1264-3-0x0000000000CC0000-0x0000000000D16000-memory.dmp
memory/1264-2-0x00007FFBCBBE0000-0x00007FFBCC584000-memory.dmp
memory/1264-1-0x00000000002D0000-0x000000000034E000-memory.dmp
memory/1268-106-0x00007FFBAEB80000-0x00007FFBAEB90000-memory.dmp
memory/1268-105-0x0000023A9ED70000-0x0000023A9ED9B000-memory.dmp
memory/1320-108-0x0000019290F30000-0x0000019290F5B000-memory.dmp
memory/1320-109-0x00007FFBAEB80000-0x00007FFBAEB90000-memory.dmp
memory/1536-66-0x00007FFBAEB80000-0x00007FFBAEB90000-memory.dmp
memory/1536-65-0x0000015BE8750000-0x0000015BE877B000-memory.dmp
memory/1568-111-0x0000023C2BA20000-0x0000023C2BA4B000-memory.dmp
memory/1568-112-0x00007FFBAEB80000-0x00007FFBAEB90000-memory.dmp
memory/1576-130-0x00007FFBAEB80000-0x00007FFBAEB90000-memory.dmp
memory/1576-129-0x0000016000030000-0x000001600005B000-memory.dmp
memory/1604-114-0x000002A4F8510000-0x000002A4F853B000-memory.dmp
memory/1604-115-0x00007FFBAEB80000-0x00007FFBAEB90000-memory.dmp
memory/1688-117-0x000001C7E33B0000-0x000001C7E33DB000-memory.dmp
memory/1688-118-0x00007FFBAEB80000-0x00007FFBAEB90000-memory.dmp
memory/1728-121-0x00007FFBAEB80000-0x00007FFBAEB90000-memory.dmp
memory/1728-120-0x000002A01DB80000-0x000002A01DBAB000-memory.dmp
memory/1772-124-0x00007FFBAEB80000-0x00007FFBAEB90000-memory.dmp
memory/1772-123-0x0000014F398E0000-0x0000014F3990B000-memory.dmp
memory/1904-126-0x0000025B65180000-0x0000025B651AB000-memory.dmp
memory/1904-127-0x00007FFBAEB80000-0x00007FFBAEB90000-memory.dmp
memory/2072-132-0x000002245D840000-0x000002245D86B000-memory.dmp
memory/2072-133-0x00007FFBAEB80000-0x00007FFBAEB90000-memory.dmp
memory/2100-136-0x00007FFBAEB80000-0x00007FFBAEB90000-memory.dmp
memory/2100-135-0x00000270B9B50000-0x00000270B9B7B000-memory.dmp
memory/2116-139-0x00007FFBAEB80000-0x00007FFBAEB90000-memory.dmp
memory/2116-138-0x0000018D0CFA0000-0x0000018D0CFCB000-memory.dmp
memory/2252-141-0x00000135ADD80000-0x00000135ADDAB000-memory.dmp
memory/2252-142-0x00007FFBAEB80000-0x00007FFBAEB90000-memory.dmp
memory/2324-144-0x000001DF4E980000-0x000001DF4E9AB000-memory.dmp
memory/2324-145-0x00007FFBAEB80000-0x00007FFBAEB90000-memory.dmp
memory/2380-147-0x000002582BEB0000-0x000002582BEDB000-memory.dmp
memory/2380-148-0x00007FFBAEB80000-0x00007FFBAEB90000-memory.dmp
memory/2496-151-0x00007FFBAEB80000-0x00007FFBAEB90000-memory.dmp
memory/2496-150-0x000001C0E7F00000-0x000001C0E7F2B000-memory.dmp
memory/2544-153-0x000001E37A910000-0x000001E37A93B000-memory.dmp
memory/2544-154-0x00007FFBAEB80000-0x00007FFBAEB90000-memory.dmp
memory/2564-157-0x00007FFBAEB80000-0x00007FFBAEB90000-memory.dmp
memory/2564-156-0x000001D484100000-0x000001D48412B000-memory.dmp
memory/2636-159-0x000001B356D90000-0x000001B356DBB000-memory.dmp
memory/2636-160-0x00007FFBAEB80000-0x00007FFBAEB90000-memory.dmp
memory/2692-162-0x0000025620D00000-0x0000025620D2B000-memory.dmp
memory/2692-163-0x00007FFBAEB80000-0x00007FFBAEB90000-memory.dmp
memory/2904-165-0x0000022728E70000-0x0000022728E9B000-memory.dmp
memory/2916-166-0x000002438C390000-0x000002438C3BB000-memory.dmp
memory/2916-167-0x00007FFBAEB80000-0x00007FFBAEB90000-memory.dmp
memory/4680-49-0x0000000006A80000-0x0000000006B12000-memory.dmp
memory/4680-34-0x0000000000D10000-0x0000000000D3A000-memory.dmp
memory/5868-38-0x00007FFBEEA40000-0x00007FFBEECA3000-memory.dmp
memory/5868-39-0x00007FFBEDFC0000-0x00007FFBEE087000-memory.dmp