Analysis
- max time kernel
150s - max time network
145s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
17/09/2026, 23:22
General
- Target CMH1.4.9b23d.exe
- Size 4.5MB
- Sample260917-3cy1msec39
- SHA256 59569421c522335acf035ad7280072a144ef92a2da2fdadf6fd237aa06b3f71c
Malware Config
Signatures
- VMProtect packed file 24 IoCs
Detects executables packed with VMProtect commercial packer.
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\CMH1.4.9b23d.exe"C:\Users\Admin\AppData\Local\Temp\CMH1.4.9b23d.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1824-0-0x0000000140000000-0x0000000140910000-memory.dmp
memory/1824-8-0x000000014029E000-0x00000001402C8000-memory.dmp
memory/1824-6-0x0000000140000000-0x0000000140910000-memory.dmp
memory/1824-9-0x0000000140000000-0x0000000140910000-memory.dmp
memory/1824-7-0x0000000140000000-0x0000000140910000-memory.dmp
memory/1824-5-0x0000000140000000-0x0000000140910000-memory.dmp
memory/1824-4-0x0000000140000000-0x0000000140910000-memory.dmp
memory/1824-10-0x0000000140000000-0x0000000140910000-memory.dmp
memory/1824-11-0x0000000140000000-0x0000000140910000-memory.dmp
memory/1824-12-0x0000000140000000-0x0000000140910000-memory.dmp
memory/1824-13-0x0000000140000000-0x0000000140910000-memory.dmp
memory/1824-14-0x0000000140000000-0x0000000140910000-memory.dmp
memory/1824-15-0x0000000140000000-0x0000000140910000-memory.dmp
memory/1824-16-0x0000000140000000-0x0000000140910000-memory.dmp
memory/1824-17-0x0000000140000000-0x0000000140910000-memory.dmp
memory/1824-18-0x0000000140000000-0x0000000140910000-memory.dmp
memory/1824-19-0x0000000140000000-0x0000000140910000-memory.dmp
memory/1824-20-0x0000000140000000-0x0000000140910000-memory.dmp
memory/1824-21-0x0000000140000000-0x0000000140910000-memory.dmp
memory/1824-22-0x0000000140000000-0x0000000140910000-memory.dmp
memory/1824-23-0x0000000140000000-0x0000000140910000-memory.dmp
memory/1824-24-0x0000000140000000-0x0000000140910000-memory.dmp
memory/1824-25-0x0000000140000000-0x0000000140910000-memory.dmp
memory/1824-26-0x0000000140000000-0x0000000140910000-memory.dmp
memory/1824-27-0x0000000140000000-0x0000000140910000-memory.dmp