Overview

overview

7

Static

static

3

tung_full.exe

windows10-2004-x64

6

tung_full.exe

windows11-ltsc_2024-x64

7

Analysis

  • user interaction
    yes
  • max time kernel
    42s
  • max time network
    45s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    22/09/2026, 16:26

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    tung_full.exe
  • Size 16.0MB
  • Sample260922-txlrdaad49
  • SHA256 1f0bfbfa0771600d9325ca85b2e8103161b98cfbebe20abbd1be3f8390412b7f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10

Malware Config

Signatures

  • Contacts third-party web service commonly abused for C2 1 TTPs 8 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\tung_full.exe
    "C:\Users\Admin\AppData\Local\Temp\tung_full.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3640
    • C:\Windows\system32\curl.exe
      "C:\Windows\system32\curl.exe" -K -
      2⤵
        PID:3492
      • C:\Windows\system32\curl.exe
        "C:\Windows\system32\curl.exe" -K -
        2⤵
          PID:3532
        • C:\Windows\system32\curl.exe
          "C:\Windows\system32\curl.exe" -K -
          2⤵
            PID:344
          • C:\Windows\system32\curl.exe
            "C:\Windows\system32\curl.exe" -K -
            2⤵
              PID:3796
            • C:\Windows\system32\curl.exe
              "C:\Windows\system32\curl.exe" -K -
              2⤵
                PID:4900
              • C:\Windows\system32\curl.exe
                "C:\Windows\system32\curl.exe" -K -
                2⤵
                  PID:3984
                • C:\Windows\system32\curl.exe
                  "C:\Windows\system32\curl.exe" -K -
                  2⤵
                    PID:4052

                Network

                      MITRE ATT&CK Enterprise v16

                      Replay Monitor

                      Loading Replay Monitor...

                      Downloads

                      tc_e38_1.out
                      • Path C:\Users\Admin\AppData\Local\Temp\tc_e38_1.out
                      • Size 43B
                      • SHA256 774085c73d7aeecdd59894443d83d16b7e4e731c89420ca9f7356a5c9c928056
                      • MD5 SHA1 SHA512
                      Submit Download

                      tc_e38_7.body
                      • Path C:\Users\Admin\AppData\Local\Temp\tc_e38_7.body
                      • Size 19B
                      • SHA256 869cac339fdaae50505403cdbe97f87286e130e677772ab76a18e0a7a526647e
                      • MD5 SHA1 SHA512
                      Submit Download

                      tc_e38_9.body
                      • Path C:\Users\Admin\AppData\Local\Temp\tc_e38_9.body
                      • Size 24B
                      • SHA256 4ec568ee0822ffff5a0f454ffb8e9b90e537978085ddeca2b228470f596d2f98
                      • MD5 SHA1 SHA512
                      Submit Download

                      memory/3640-2-0x00007FF65C470000-0x00007FF65D2D4000-memory.dmp
                      Download

                      memory/3640-5-0x00007FF65C470000-0x00007FF65D2D4000-memory.dmp
                      Download

                      memory/3640-20-0x00007FF65C470000-0x00007FF65D2D4000-memory.dmp
                      Download