Analysis
- max time kernel
150s - max time network
149s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
21/09/2026, 15:37
General
- Target c0760243b7d45fe73f14ee66edd44139ea51761d201446755a23a0e6ba8b4222.exe
- Size 1.2MB
- Sample260921-s2phdsch38
- SHA256 c0760243b7d45fe73f14ee66edd44139ea51761d201446755a23a0e6ba8b4222
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
- Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c0760243b7d45fe73f14ee66edd44139ea51761d201446755a23a0e6ba8b4222.exe"C:\Users\Admin\AppData\Local\Temp\c0760243b7d45fe73f14ee66edd44139ea51761d201446755a23a0e6ba8b4222.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2808-0-0x00007FFB23A5F000-0x00007FFB23A60000-memory.dmp
memory/2808-1-0x000001A015A90000-0x000001A015AC4000-memory.dmp
memory/2808-2-0x00007FFB238D0000-0x00007FFB24274000-memory.dmp
memory/2808-3-0x00007FFB238D0000-0x00007FFB24274000-memory.dmp
memory/2808-4-0x00007FFB238D0000-0x00007FFB24274000-memory.dmp
memory/2808-5-0x00007FFB238D0000-0x00007FFB24274000-memory.dmp
memory/2808-6-0x00007FFB238D0000-0x00007FFB24274000-memory.dmp
memory/2808-7-0x00007FFB238D0000-0x00007FFB24274000-memory.dmp
memory/2808-8-0x00007FFB238D0000-0x00007FFB24274000-memory.dmp
memory/2808-9-0x00007FFB238D0000-0x00007FFB24274000-memory.dmp
memory/2808-10-0x00007FFB238D0000-0x00007FFB24274000-memory.dmp
memory/2808-11-0x00007FFB238D0000-0x00007FFB24274000-memory.dmp
memory/2808-12-0x000001A033440000-0x000001A033448000-memory.dmp
memory/2808-15-0x00007FFB238D0000-0x00007FFB24274000-memory.dmp
memory/2808-14-0x000001A033490000-0x000001A03349E000-memory.dmp
memory/2808-18-0x00007FFB238D0000-0x00007FFB24274000-memory.dmp
memory/2808-13-0x000001A0334C0000-0x000001A0334FE000-memory.dmp
memory/2808-20-0x00007FFB238D0000-0x00007FFB24274000-memory.dmp
memory/2808-35-0x00007FFB238D0000-0x00007FFB24274000-memory.dmp
memory/2808-36-0x00007FFB238D0000-0x00007FFB24274000-memory.dmp
memory/2808-37-0x00007FFB238D0000-0x00007FFB24274000-memory.dmp
memory/2808-38-0x00007FFB238D0000-0x00007FFB24274000-memory.dmp