Analysis

  • max time kernel
    149s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    22/09/2026, 12:26

General

  • Target
    TaskbarCalendar.exe
  • Size 386KB
  • Sample260922-pl66qaec98
  • SHA256 cf1664d2743918efae74cf4b5207ad98b347c33630d95d282ef413b15e35e689
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\TaskbarCalendar.exe
    "C:\Users\Admin\AppData\Local\Temp\TaskbarCalendar.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:1856

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/1856-0-0x0000014787F80000-0x0000014787FE4000-memory.dmp

        memory/1856-1-0x00000147A2510000-0x00000147A2520000-memory.dmp

        memory/1856-2-0x00000147A2510000-0x00000147A2520000-memory.dmp

        memory/1856-3-0x00000147A3EE0000-0x00000147A3F80000-memory.dmp

        memory/1856-4-0x0000014789BB0000-0x0000014789BBA000-memory.dmp

        memory/1856-7-0x00000147A2510000-0x00000147A2520000-memory.dmp

        memory/1856-10-0x00000147A66E0000-0x00000147A670E000-memory.dmp

        memory/1856-12-0x00000147A6710000-0x00000147A6726000-memory.dmp

        memory/1856-13-0x00000147A6770000-0x00000147A67A8000-memory.dmp

        memory/1856-15-0x00000147A67B0000-0x00000147A67D6000-memory.dmp

        memory/1856-14-0x00000147A24F0000-0x00000147A24FE000-memory.dmp

        memory/1856-16-0x00000147A6730000-0x00000147A6738000-memory.dmp

        memory/1856-17-0x00000147A6840000-0x00000147A689A000-memory.dmp

        memory/1856-18-0x00000147A6760000-0x00000147A676A000-memory.dmp

        memory/1856-19-0x00000147A3ED0000-0x00000147A3EDA000-memory.dmp

        memory/1856-20-0x00000147A6740000-0x00000147A6748000-memory.dmp

        memory/1856-21-0x00000147A2510000-0x00000147A2520000-memory.dmp

        memory/1856-22-0x00000147A6800000-0x00000147A681E000-memory.dmp

        memory/1856-24-0x00000147A2510000-0x00000147A2520000-memory.dmp

        memory/1856-25-0x00000147A2510000-0x00000147A2520000-memory.dmp

        memory/1856-26-0x00000147A2510000-0x00000147A2520000-memory.dmp

        memory/1856-28-0x00000147A2510000-0x00000147A2520000-memory.dmp

        memory/1856-27-0x00000147A3F80000-0x00000147A4129000-memory.dmp

        memory/1856-33-0x00000147A2510000-0x00000147A2520000-memory.dmp

        memory/1856-32-0x00000147A2510000-0x00000147A2520000-memory.dmp

        memory/1856-41-0x00000147A2510000-0x00000147A2520000-memory.dmp