Analysis
- max time kernel
149s - max time network
145s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
10/09/2026, 10:30
General
- Target 28020cc80067fe6707d74b226cb0d8548971ed121aa9afd85093196b9fcd788e.exe
- Size 1.4MB
- Sample260910-mj3dms1gqa
- SHA256 28020cc80067fe6707d74b226cb0d8548971ed121aa9afd85093196b9fcd788e
Score
5/10
Malware Config
Signatures
- Suspicious use of SetThreadContext 1 IoCs
- UPX packed file 6 IoCs
Detects executables packed with UPX/modified UPX open source packer.
- Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\28020cc80067fe6707d74b226cb0d8548971ed121aa9afd85093196b9fcd788e.exe"C:\Users\Admin\AppData\Local\Temp\28020cc80067fe6707d74b226cb0d8548971ed121aa9afd85093196b9fcd788e.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
-
C:\Windows\System32\notepad.exe"C:\Windows\System32\notepad.exe"2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
debug_log.txt
memory/3184-0-0x00007FFA90E90000-0x00007FFA91085000-memory.dmp
memory/3184-11-0x00007FF700CF0000-0x00007FF700DF6000-memory.dmp
memory/5036-9-0x0000000140000000-0x0000000140124000-memory.dmp
memory/5036-13-0x0000000140000000-0x0000000140124000-memory.dmp
memory/5036-12-0x0000000140000000-0x0000000140124000-memory.dmp
memory/5036-10-0x0000000140000000-0x0000000140124000-memory.dmp
memory/5036-7-0x0000000140000000-0x0000000140124000-memory.dmp
memory/5036-14-0x0000000140000000-0x0000000140124000-memory.dmp