Analysis

  • user interaction
    yes
  • max time kernel
    82s
  • max time network
    71s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    16/09/2026, 06:19

General

  • Target
    SpeedAutoClicker.exe
  • Size 2.1MB
  • Sample260916-g3ffbswdph
  • SHA256 6bc32e935a514da31e6ed5559252c36d82fd64b1e6403748b0ba86598ef20071
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 25 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SendNotifyMessage 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SpeedAutoClicker.exe
    "C:\Users\Admin\AppData\Local\Temp\SpeedAutoClicker.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:6000

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        ac.config

        • Path C:\Users\Admin\AppData\Local\fabi.me\ac.config
        • Size 1KB
        • SHA256 910a27cea0c510cf8d8bbdbc239bf9afe0a9dfd53628ea5db3136902a2972359
        • MD5 SHA1 SHA512 TLSH

        memory/6000-8-0x00000000050B0000-0x00000000050CA000-memory.dmp

        memory/6000-12-0x0000000005FB0000-0x0000000005FBA000-memory.dmp

        memory/6000-4-0x00000000743D0000-0x0000000074B8C000-memory.dmp

        memory/6000-3-0x0000000004F50000-0x0000000004F6A000-memory.dmp

        memory/6000-6-0x0000000004F70000-0x0000000004F82000-memory.dmp

        memory/6000-5-0x0000000005010000-0x00000000050A2000-memory.dmp

        memory/6000-7-0x0000000004F90000-0x0000000004FDA000-memory.dmp

        memory/6000-0-0x00000000743E2000-0x00000000743E3000-memory.dmp

        memory/6000-2-0x00000000056A0000-0x0000000005C5A000-memory.dmp

        memory/6000-13-0x00000000743D0000-0x0000000074B8C000-memory.dmp

        memory/6000-9-0x00000000050E0000-0x00000000050E8000-memory.dmp

        memory/6000-14-0x00000000743D0000-0x0000000074B8C000-memory.dmp

        memory/6000-17-0x000000000B2B0000-0x000000000B472000-memory.dmp

        memory/6000-18-0x000000000B9B0000-0x000000000BEDC000-memory.dmp

        memory/6000-21-0x00000000743E2000-0x00000000743E3000-memory.dmp

        memory/6000-22-0x00000000743D0000-0x0000000074B8C000-memory.dmp

        memory/6000-1-0x0000000000220000-0x0000000000446000-memory.dmp