Analysis
- user interaction
yes - max time kernel
150s - max time network
118s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
19/09/2026, 13:09
General
- Target Lause.exe
- Size 71.8MB
- Sample260919-qd3c8sff89
- SHA256 dba81cc1e0e51393b7bf872a419f7b96dc3c87efa82b7170ebd39ac9c9c0875e
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 8 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Lause.exe"C:\Users\Admin\AppData\Local\Temp\Lause.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/880-6-0x00000171AE7B0000-0x00000171AF440000-memory.dmp
memory/880-10-0x00000171AD470000-0x00000171AD490000-memory.dmp
memory/880-14-0x00000171AF840000-0x00000171AF880000-memory.dmp
memory/880-22-0x00000171AF880000-0x00000171AF8A0000-memory.dmp
memory/880-34-0x00000171AF8F0000-0x00000171AF910000-memory.dmp
memory/880-18-0x00000171B0BA0000-0x00000171B1890000-memory.dmp
memory/880-26-0x00000171B1890000-0x00000171B1B70000-memory.dmp
memory/880-30-0x00000171AF8A0000-0x00000171AF8C0000-memory.dmp
memory/880-38-0x00000171AF950000-0x00000171AF970000-memory.dmp
memory/880-44-0x00000171AF9D0000-0x00000171AFA00000-memory.dmp
memory/880-60-0x00000171B1D40000-0x00000171B1D60000-memory.dmp
memory/880-56-0x00000171B1D90000-0x00000171B1DC0000-memory.dmp
memory/880-48-0x00000171AFD00000-0x00000171AFE80000-memory.dmp
memory/880-52-0x00000171AFA00000-0x00000171AFA10000-memory.dmp
memory/880-68-0x0000017180B50000-0x0000017180C10000-memory.dmp
memory/880-64-0x0000017180A00000-0x0000017180A10000-memory.dmp
memory/880-72-0x0000017185680000-0x00000171856A0000-memory.dmp
memory/880-76-0x0000017181C70000-0x0000017181CB0000-memory.dmp
memory/880-80-0x0000017181D90000-0x0000017181DE0000-memory.dmp