Analysis
- user interaction
yes - max time kernel
117s - max time network
118s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/09/2026, 16:05
General
- Target LOADER.exe
- Size 93.2MB
- Sample260910-tjlt8asbrc
- SHA256 9b9acea2285141d3330e5530d25e9da645036ac9c638ae55713be825f1de505d
Malware Config
Signatures
- Loads dropped DLL 3 IoCs
- Suspicious behavior: EnumeratesProcesses 2 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\LOADER.exe"C:\Users\Admin\AppData\Local\Temp\LOADER.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
cimgui.dll
SDL2.dll
cimgui.dll
memory/4272-120-0x0000013109340000-0x0000013109350000-memory.dmp
memory/4272-59-0x00000131010F0000-0x0000013101100000-memory.dmp
memory/4272-16-0x0000013103F80000-0x0000013106280000-memory.dmp
memory/4272-40-0x0000013106280000-0x0000013106930000-memory.dmp
memory/4272-32-0x00000131000A0000-0x00000131000C0000-memory.dmp
memory/4272-24-0x0000013100040000-0x0000013100050000-memory.dmp
memory/4272-11-0x0000013109650000-0x000001310F830000-memory.dmp
memory/4272-20-0x0000013100020000-0x0000013100030000-memory.dmp
memory/4272-68-0x0000013101110000-0x0000013101120000-memory.dmp
memory/4272-76-0x00000131018F0000-0x0000013101900000-memory.dmp
memory/4272-72-0x0000013101130000-0x0000013101140000-memory.dmp
memory/4272-63-0x00000131011C0000-0x0000013101230000-memory.dmp
memory/4272-84-0x0000013101AA0000-0x0000013101AC0000-memory.dmp
memory/4272-55-0x0000013100180000-0x0000013100190000-memory.dmp
memory/4272-51-0x00000131010B0000-0x00000131010D0000-memory.dmp
memory/4272-88-0x0000013108CD0000-0x0000013108D20000-memory.dmp
memory/4272-109-0x0000013108DA0000-0x0000013108DB0000-memory.dmp
memory/4272-104-0x0000013108EC0000-0x0000013108EE0000-memory.dmp
memory/4272-100-0x0000013108E10000-0x0000013108E70000-memory.dmp
memory/4272-115-0x0000013108F20000-0x0000013108F30000-memory.dmp
memory/4272-7-0x0000013100620000-0x0000013100AB0000-memory.dmp
memory/4272-28-0x0000013100060000-0x0000013100080000-memory.dmp
memory/4272-36-0x0000013100140000-0x0000013100180000-memory.dmp
memory/4272-96-0x0000013108D60000-0x0000013108D80000-memory.dmp
memory/4272-144-0x000000006C740000-0x000000006C891000-memory.dmp
memory/4272-92-0x0000013108D20000-0x0000013108D40000-memory.dmp
memory/4272-128-0x0000013109380000-0x0000013109390000-memory.dmp
memory/4272-124-0x0000013109490000-0x00000131094B0000-memory.dmp
memory/4272-140-0x00000131095E0000-0x0000013109610000-memory.dmp
memory/4272-136-0x0000013109500000-0x0000013109510000-memory.dmp
memory/4272-132-0x0000013109550000-0x0000013109580000-memory.dmp
memory/4272-80-0x0000013101A80000-0x0000013101A90000-memory.dmp
memory/4272-145-0x000000006C740000-0x000000006C891000-memory.dmp
memory/4272-146-0x000000006C740000-0x000000006C891000-memory.dmp
memory/4272-147-0x000000006C740000-0x000000006C891000-memory.dmp
memory/4272-148-0x000000006C740000-0x000000006C891000-memory.dmp
memory/4272-149-0x000000006C740000-0x000000006C891000-memory.dmp
memory/4272-150-0x000000006C740000-0x000000006C891000-memory.dmp
memory/4272-153-0x0000013100000000-0x0000013100010000-memory.dmp
memory/4272-157-0x000000006C740000-0x000000006C891000-memory.dmp
memory/4272-159-0x000000006C740000-0x000000006C891000-memory.dmp
memory/4272-161-0x0000013109610000-0x0000013109620000-memory.dmp
memory/4272-169-0x0000013107670000-0x00000131076B0000-memory.dmp
memory/4272-165-0x0000013107730000-0x00000131077B0000-memory.dmp
memory/4272-177-0x0000013107800000-0x0000013107810000-memory.dmp
memory/4272-173-0x0000013107A70000-0x0000013107C40000-memory.dmp
memory/4272-181-0x000000006C740000-0x000000006C891000-memory.dmp