Analysis
- user interaction
yes - max time kernel
149s - max time network
145s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
- submitted
20/09/2026, 22:19
General
- Target Installer-1.1.0.exe
- Size 9.8MB
- Sample260920-18nhnser5x
- SHA256 7d369ef21a49e0bcfd7875d2e000a5c6bb592e00f305e139a188f40b3dc32249
Score
7/10
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
- Loads dropped DLL 1 IoCs
- Suspicious behavior: EnumeratesProcesses 2 IoCs
- Suspicious use of SetWindowsHookEx 5 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Installer-1.1.0.exe"C:\Users\Admin\AppData\Local\Temp\Installer-1.1.0.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-354D61FC-7068-49B7-A879-98659F6B574E\MadiumInstaller.exe"C:\Users\Admin\AppData\Local\Temp\MadiumInstaller-354D61FC-7068-49B7-A879-98659F6B574E\MadiumInstaller.exe" --from-sfx --first-install2⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
MadiumInstaller.exe
app.so
AssetManifest.bin
FontManifest.json
NOTICES.Z
NativeAssetsManifest.json
MaterialIcons-Regular.otf
ink_sparkle.frag
stretch_effect.frag
icudtl.dat
flutter_windows.dll
memory/1228-29-0x00000213BC480000-0x00000213BC500000-memory.dmp
memory/1228-21-0x00000213B9070000-0x00000213B9071000-memory.dmp
memory/1228-22-0x00000213BBE10000-0x00000213BC375000-memory.dmp
memory/1228-23-0x00000213BBE10000-0x00000213BC375000-memory.dmp
memory/1228-28-0x00000213BC480000-0x00000213BC500000-memory.dmp
memory/1228-25-0x00000213B9080000-0x00000213B9081000-memory.dmp
memory/1228-24-0x00000213BBE10000-0x00000213BC375000-memory.dmp