Analysis
- max time kernel
149s - max time network
134s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
10/09/2026, 08:52
General
- Target 1f1ab962520a793cd748cd062952e5dee64201c1fb3b592271bbe117c88ac79e.exe
- Size 2.1MB
- Sample260910-kspg2aak8s
- SHA256 1f1ab962520a793cd748cd062952e5dee64201c1fb3b592271bbe117c88ac79e
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\1f1ab962520a793cd748cd062952e5dee64201c1fb3b592271bbe117c88ac79e.exe"C:\Users\Admin\AppData\Local\Temp\1f1ab962520a793cd748cd062952e5dee64201c1fb3b592271bbe117c88ac79e.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
amber_led.png
blue_led.png
configs.ini
configs.ini
configs.ini
green_led.png
hc_logo2.png
red_led.png
memory/1040-279-0x0000000140000000-0x000000014022A000-memory.dmp
memory/1040-352-0x0000000140000000-0x000000014022A000-memory.dmp
memory/1040-280-0x0000000140000000-0x000000014022A000-memory.dmp
memory/1040-0-0x00000001400F8000-0x00000001400F9000-memory.dmp
memory/1040-335-0x0000000140000000-0x000000014022A000-memory.dmp
memory/1040-340-0x0000000140000000-0x000000014022A000-memory.dmp
memory/1040-278-0x0000000140000000-0x000000014022A000-memory.dmp
memory/1040-26-0x0000000140000000-0x000000014022A000-memory.dmp
memory/1040-10-0x0000000000810000-0x00000000008CE000-memory.dmp
memory/1040-349-0x0000000140000000-0x000000014022A000-memory.dmp
memory/1040-350-0x0000000140000000-0x000000014022A000-memory.dmp
memory/1040-281-0x00000001400F8000-0x00000001400F9000-memory.dmp
memory/1040-351-0x0000000140000000-0x000000014022A000-memory.dmp
memory/1040-368-0x0000000140000000-0x000000014022A000-memory.dmp
memory/1040-1-0x0000000180000000-0x00000001801F5000-memory.dmp
memory/1040-400-0x0000000140000000-0x000000014022A000-memory.dmp
memory/1040-401-0x0000000140000000-0x000000014022A000-memory.dmp
memory/1040-402-0x0000000140000000-0x000000014022A000-memory.dmp
memory/1040-16-0x0000000002E30000-0x0000000002F86000-memory.dmp
memory/1040-961-0x0000000140000000-0x000000014022A000-memory.dmp
memory/1040-993-0x0000000140000000-0x000000014022A000-memory.dmp
memory/1040-994-0x0000000140000000-0x000000014022A000-memory.dmp