Analysis
- max time kernel
151s - max time network
117s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
16/09/2026, 19:43
General
- Target HwidPlus (orjinal).exe
- Size 97.3MB
- Sample260916-yfcvcsdc86
- SHA256 1997f2e50ef65185633e45e11e080264fb7091eae0ab21899b05ccc6b0b4a8aa
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\HwidPlus (orjinal).exe"C:\Users\Admin\AppData\Local\Temp\HwidPlus (orjinal).exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4232-0-0x00007FFAEF64F000-0x00007FFAEF650000-memory.dmp
memory/4232-1-0x00007FFAEF4C0000-0x00007FFAEFE64000-memory.dmp
memory/4232-2-0x0000018200000000-0x0000018206154000-memory.dmp
memory/4232-3-0x00007FFAEF4C0000-0x00007FFAEFE64000-memory.dmp
memory/4232-4-0x000001819AF20000-0x000001819B096000-memory.dmp
memory/4232-5-0x00000181818E0000-0x0000018181912000-memory.dmp
memory/4232-6-0x00007FFAEF4C0000-0x00007FFAEFE64000-memory.dmp
memory/4232-7-0x00007FFAEF4C0000-0x00007FFAEFE64000-memory.dmp
memory/4232-8-0x00007FFAEF4C0000-0x00007FFAEFE64000-memory.dmp
memory/4232-9-0x000001819E360000-0x000001819E888000-memory.dmp
memory/4232-10-0x00007FFAEF4C0000-0x00007FFAEFE64000-memory.dmp
memory/4232-11-0x00007FFAEF4C0000-0x00007FFAEFE64000-memory.dmp
memory/4232-12-0x00007FFAEF4C0000-0x00007FFAEFE64000-memory.dmp
memory/4232-13-0x000001819DF80000-0x000001819DF8C000-memory.dmp