Analysis
- user interaction
yes - max time kernel
80s - max time network
79s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
- submitted
16/09/2026, 06:19
General
- Target SpeedAutoClicker.exe
- Size 2.1MB
- Sample260916-g3ffbswdph
- SHA256 6bc32e935a514da31e6ed5559252c36d82fd64b1e6403748b0ba86598ef20071
Malware Config
Signatures
- Program crash 1 IoCs
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious behavior: EnumeratesProcesses 2 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of FindShellTrayWindow 1 IoCs
- Suspicious use of SendNotifyMessage 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\SpeedAutoClicker.exe"C:\Users\Admin\AppData\Local\Temp\SpeedAutoClicker.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1600 -s 26002⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 1600 -ip 16001⤵
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1600-0-0x0000000000050000-0x0000000000276000-memory.dmp
memory/1600-1-0x0000000005260000-0x0000000005804000-memory.dmp
memory/1600-2-0x0000000004CA0000-0x0000000004CB0000-memory.dmp
memory/1600-3-0x0000000004BF0000-0x0000000004C0A000-memory.dmp
memory/1600-4-0x0000000004D50000-0x0000000004DE2000-memory.dmp
memory/1600-5-0x0000000004C30000-0x0000000004C42000-memory.dmp
memory/1600-6-0x0000000004C50000-0x0000000004C9A000-memory.dmp
memory/1600-7-0x0000000004CE0000-0x0000000004CFA000-memory.dmp
memory/1600-8-0x0000000004D00000-0x0000000004D08000-memory.dmp
memory/1600-11-0x0000000005B70000-0x0000000005B7A000-memory.dmp
memory/1600-12-0x0000000004CA0000-0x0000000004CB0000-memory.dmp
memory/1600-15-0x000000000A510000-0x000000000A6D2000-memory.dmp
memory/1600-16-0x0000000004CA0000-0x0000000004CB0000-memory.dmp
memory/1600-17-0x0000000004CA0000-0x0000000004CB0000-memory.dmp
memory/1600-18-0x00000000058E0000-0x00000000058EA000-memory.dmp
memory/1600-19-0x0000000005900000-0x0000000005908000-memory.dmp
memory/1600-20-0x000000000BD40000-0x000000000C26C000-memory.dmp
memory/1600-21-0x000000000A440000-0x000000000A4EA000-memory.dmp
memory/1600-22-0x000000000ADB0000-0x000000000ADD2000-memory.dmp
memory/1600-23-0x000000000ADE0000-0x000000000B134000-memory.dmp