Analysis
- user interaction
yes - max time kernel
300s - max time network
132s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
22/09/2026, 16:46
General
- Target 2f2a2349b896d71b3c176b7a91ddc5b53e3a68e131417a54e03cc111fe075a51.zip
- Size 4.1MB
- Sample260922-vae6raygrh
- SHA256 2f2a2349b896d71b3c176b7a91ddc5b53e3a68e131417a54e03cc111fe075a51
Malware Config
Signatures
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\2f2a2349b896d71b3c176b7a91ddc5b53e3a68e131417a54e03cc111fe075a51.zip1⤵
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵
-
C:\Users\Admin\Desktop\2f2a2349b896d71b3c176b7a91ddc5b53e3a68e131417a54e03cc111fe075a51\DiyaDBRestore\RestoreDiyaVPSDB.exe"C:\Users\Admin\Desktop\2f2a2349b896d71b3c176b7a91ddc5b53e3a68e131417a54e03cc111fe075a51\DiyaDBRestore\RestoreDiyaVPSDB.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2944-0-0x00007FF9C7E6A000-0x00007FF9C7E6B000-memory.dmp
memory/2944-1-0x00007FF9C7B70000-0x00007FF9C85A8000-memory.dmp
memory/2944-2-0x000000001BA40000-0x000000001BA6E000-memory.dmp
memory/2944-4-0x000000001C2E0000-0x000000001C7AE000-memory.dmp
memory/2944-3-0x000000001BD60000-0x000000001BE06000-memory.dmp
memory/2944-5-0x000000001C8B0000-0x000000001C94C000-memory.dmp
memory/2944-6-0x0000000002CC0000-0x0000000002CC8000-memory.dmp
memory/2944-7-0x000000001CA10000-0x000000001CA5C000-memory.dmp
memory/2944-8-0x00007FF9C7B70000-0x00007FF9C85A8000-memory.dmp
memory/2944-9-0x00007FF9C7B70000-0x00007FF9C85A8000-memory.dmp
memory/2944-10-0x00007FF9C7B70000-0x00007FF9C85A8000-memory.dmp
memory/2944-11-0x00007FF9C7B70000-0x00007FF9C85A8000-memory.dmp
memory/2944-12-0x00007FF9C7B70000-0x00007FF9C85A8000-memory.dmp
memory/2944-13-0x000000001F2B0000-0x000000001F5C0000-memory.dmp
memory/2944-14-0x00007FF9C7B70000-0x00007FF9C85A8000-memory.dmp
memory/2944-15-0x00007FF9C7B70000-0x00007FF9C85A8000-memory.dmp
memory/2944-16-0x000000001F5C0000-0x000000001F609000-memory.dmp
memory/2944-18-0x00007FF9C7B70000-0x00007FF9C85A8000-memory.dmp
memory/2944-17-0x000000001F7E0000-0x000000001F81E000-memory.dmp
memory/2944-19-0x00007FF9C7B70000-0x00007FF9C85A8000-memory.dmp
memory/2944-20-0x00007FF9C7B70000-0x00007FF9C85A8000-memory.dmp
memory/2944-21-0x00007FF9C7E6A000-0x00007FF9C7E6B000-memory.dmp
memory/2944-22-0x00007FF9C7B70000-0x00007FF9C85A8000-memory.dmp
memory/2944-23-0x00007FF9C7B70000-0x00007FF9C85A8000-memory.dmp
memory/2944-24-0x00007FF9C7B70000-0x00007FF9C85A8000-memory.dmp
memory/2944-25-0x00007FF9C7B70000-0x00007FF9C85A8000-memory.dmp
memory/2944-26-0x00007FF9C7B70000-0x00007FF9C85A8000-memory.dmp
memory/2944-27-0x00007FF9C7B70000-0x00007FF9C85A8000-memory.dmp
memory/2944-28-0x00007FF9C7B70000-0x00007FF9C85A8000-memory.dmp