Analysis

  • max time kernel
    148s
  • max time network
    133s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    08/09/2026, 02:52

General

  • Target
    961e258729a0831f774202ce023f9e6670314fd9db6a448a25b4ab474dafcb90.exe
  • Size 6.6MB
  • Sample260908-dc6ytabq6v
  • SHA256 961e258729a0831f774202ce023f9e6670314fd9db6a448a25b4ab474dafcb90
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Inno Setup is an open-source installation builder for Windows applications. 2 IoCs

    Inno Setup installer

  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\961e258729a0831f774202ce023f9e6670314fd9db6a448a25b4ab474dafcb90.exe
    "C:\Users\Admin\AppData\Local\Temp\961e258729a0831f774202ce023f9e6670314fd9db6a448a25b4ab474dafcb90.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:5908
    • C:\Users\Admin\AppData\Local\Temp\is-QA0GGYXBPG.tmp\961e258729a0831f774202ce023f9e6670314fd9db6a448a25b4ab474dafcb90.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-QA0GGYXBPG.tmp\961e258729a0831f774202ce023f9e6670314fd9db6a448a25b4ab474dafcb90.tmp" /SL5="$B0036,5316555,1412608,C:\Users\Admin\AppData\Local\Temp\961e258729a0831f774202ce023f9e6670314fd9db6a448a25b4ab474dafcb90.exe"
      2⤵
      • Executes dropped EXE
      PID:2760

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        961e258729a0831f774202ce023f9e6670314fd9db6a448a25b4ab474dafcb90.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\is-QA0GGYXBPG.tmp\961e258729a0831f774202ce023f9e6670314fd9db6a448a25b4ab474dafcb90.tmp
        • Size 6.6MB
        • SHA256 9cf756ad8ca7e679473af389318b97fd88372dab06c803910fa3ff158feae5d3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/2760-14-0x0000000001000000-0x00000000016B7000-memory.dmp

        memory/2760-20-0x0000000001000000-0x00000000016B7000-memory.dmp

        memory/2760-34-0x0000000001000000-0x00000000016B7000-memory.dmp

        memory/2760-8-0x0000022708D60000-0x0000022708D61000-memory.dmp

        memory/2760-7-0x0000000001000000-0x00000000016B7000-memory.dmp

        memory/2760-10-0x0000000001000000-0x00000000016B7000-memory.dmp

        memory/2760-12-0x0000000001000000-0x00000000016B7000-memory.dmp

        memory/2760-32-0x0000000001000000-0x00000000016B7000-memory.dmp

        memory/2760-5-0x0000022708D60000-0x0000022708D61000-memory.dmp

        memory/2760-16-0x0000000001000000-0x00000000016B7000-memory.dmp

        memory/2760-18-0x0000000001000000-0x00000000016B7000-memory.dmp

        memory/2760-22-0x0000000001000000-0x00000000016B7000-memory.dmp

        memory/2760-24-0x0000000001000000-0x00000000016B7000-memory.dmp

        memory/2760-26-0x0000000001000000-0x00000000016B7000-memory.dmp

        memory/2760-28-0x0000000001000000-0x00000000016B7000-memory.dmp

        memory/2760-30-0x0000000001000000-0x00000000016B7000-memory.dmp

        memory/5908-0-0x0000000000580000-0x00000000006EE000-memory.dmp

        memory/5908-6-0x0000000000580000-0x00000000006EE000-memory.dmp