Analysis
- max time kernel
146s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
- submitted
19/09/2026, 08:09
General
- Target 2026-09-19_0bc56fdbd5ef4601b2965265c3162cba_hive.exe
- Size 8.1MB
- Sample260919-j2kprsysby
- SHA256 2dc31a2c4eac7357ecae8ff950255023eaa334ab6acc2373640c9a2bad131bb4
Malware Config
Signatures
- Contacts a large (65556) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
- Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
- UPX dump on OEP (original entry point) 16 IoCs
- UPX packed file 16 IoCs
Detects executables packed with UPX/modified UPX open source packer.
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-19_0bc56fdbd5ef4601b2965265c3162cba_hive.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-19_0bc56fdbd5ef4601b2965265c3162cba_hive.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4652-0-0x00007FF7EB820000-0x00007FF7EFF33000-memory.dmp
memory/4652-7-0x00007FF7EB820000-0x00007FF7EFF33000-memory.dmp
memory/4652-8-0x00007FF7EB820000-0x00007FF7EFF33000-memory.dmp
memory/4652-9-0x00007FF7EB820000-0x00007FF7EFF33000-memory.dmp
memory/4652-10-0x00007FF7EB820000-0x00007FF7EFF33000-memory.dmp
memory/4652-11-0x00007FF7EB820000-0x00007FF7EFF33000-memory.dmp
memory/4652-12-0x00007FF7EB820000-0x00007FF7EFF33000-memory.dmp
memory/4652-13-0x00007FF7EB820000-0x00007FF7EFF33000-memory.dmp
memory/4652-14-0x00007FF7EB820000-0x00007FF7EFF33000-memory.dmp
memory/4652-15-0x00007FF7EB820000-0x00007FF7EFF33000-memory.dmp
memory/4652-16-0x00007FF7EB820000-0x00007FF7EFF33000-memory.dmp
memory/4652-17-0x00007FF7EB820000-0x00007FF7EFF33000-memory.dmp
memory/4652-18-0x00007FF7EB820000-0x00007FF7EFF33000-memory.dmp
memory/4652-19-0x00007FF7EB820000-0x00007FF7EFF33000-memory.dmp
memory/4652-20-0x00007FF7EB820000-0x00007FF7EFF33000-memory.dmp
memory/4652-21-0x00007FF7EB820000-0x00007FF7EFF33000-memory.dmp