Analysis
- max time kernel
148s - max time network
112s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
16/09/2026, 13:45
General
- Target BluuWare-Safety.exe
- Size 48KB
- Sample260916-q2m88abb84
- SHA256 8cbb2d40b27bd143ff5a1a53e80c6cd767fdc5706ee97c17e5511824a2c12d7b
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\BluuWare-Safety.exe"C:\Users\Admin\AppData\Local\Temp\BluuWare-Safety.exe"1⤵
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x00000000000004CC 0x00000000000004C81⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2720-0-0x00007FFE6AA5F000-0x00007FFE6AA60000-memory.dmp
memory/2720-1-0x0000000000040000-0x0000000000052000-memory.dmp
memory/2720-2-0x00007FFE6A8D0000-0x00007FFE6B274000-memory.dmp
memory/2720-3-0x00007FFE6A8D0000-0x00007FFE6B274000-memory.dmp
memory/2720-4-0x00007FFE6A8D0000-0x00007FFE6B274000-memory.dmp
memory/2720-5-0x00007FFE6A8D0000-0x00007FFE6B274000-memory.dmp