Analysis
- max time kernel
150s - max time network
132s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
13/09/2026, 15:12
General
- Target WinOptimizer-Portable (1).exe
- Size 63.0MB
- Sample260913-sk7yeahm5s
- SHA256 097a3722998274327807a8f2c37ea2a46d34cc2dd876c2903269d0ae86e0a00a
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 23 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\WinOptimizer-Portable (1).exe"C:\Users\Admin\AppData\Local\Temp\WinOptimizer-Portable (1).exe"1⤵
- Suspicious behavior: EnumeratesProcesses
-
C:\Windows\system32\wbem\WmiApSrv.exeC:\Windows\system32\wbem\WmiApSrv.exe1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4888-5-0x000001F58B7A0000-0x000001F58C430000-memory.dmp
memory/4888-59-0x000001F58C920000-0x000001F58C950000-memory.dmp
memory/4888-67-0x000001F58CA20000-0x000001F58CA40000-memory.dmp
memory/4888-56-0x000001F58DDC0000-0x000001F58DF40000-memory.dmp
memory/4888-9-0x000001F580000000-0x000001F580CF0000-memory.dmp
memory/4888-71-0x000001F58DF90000-0x000001F58DFA0000-memory.dmp
memory/4888-63-0x000001F58C5B0000-0x000001F58C5D0000-memory.dmp
memory/4888-47-0x000001F58C8F0000-0x000001F58C920000-memory.dmp
memory/4888-37-0x000001F58C520000-0x000001F58C540000-memory.dmp
memory/4888-29-0x000001F58C430000-0x000001F58C4C0000-memory.dmp
memory/4888-17-0x000001F58D760000-0x000001F58DA40000-memory.dmp
memory/4888-52-0x000001F58C990000-0x000001F58C9D0000-memory.dmp
memory/4888-41-0x000001F58C580000-0x000001F58C5A0000-memory.dmp
memory/4888-33-0x000001F58AA20000-0x000001F58AA70000-memory.dmp
memory/4888-25-0x000001F58A9F0000-0x000001F58AA10000-memory.dmp
memory/4888-21-0x000001F58A550000-0x000001F58A570000-memory.dmp
memory/4888-13-0x000001F58A4D0000-0x000001F58A4F0000-memory.dmp
memory/4888-75-0x000001F584C90000-0x000001F584CC0000-memory.dmp
memory/4888-79-0x000001F586030000-0x000001F586050000-memory.dmp
memory/4888-83-0x000001F586070000-0x000001F586090000-memory.dmp
memory/4888-91-0x000001F586050000-0x000001F586060000-memory.dmp
memory/4888-89-0x000001F586BA0000-0x000001F586C60000-memory.dmp
memory/4888-95-0x000001F586C80000-0x000001F586CD0000-memory.dmp
memory/4888-99-0x000001F5860B0000-0x000001F5860C0000-memory.dmp
memory/4888-103-0x000001F586EB0000-0x000001F586EC0000-memory.dmp
memory/4888-109-0x000001F587010000-0x000001F587020000-memory.dmp
memory/4888-117-0x000001F588190000-0x000001F588260000-memory.dmp
memory/4888-114-0x000001F587FB0000-0x000001F5880C0000-memory.dmp