Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
25/09/2026, 21:54
General
- Target BotKiller.exe
- Size 16KB
- Sample260925-1sc21ahh38
- SHA256 9164474d078c7ac011bcf384834669871095e6c3de6d722b42863765171a1208
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 31 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\BotKiller.exe"C:\Users\Admin\AppData\Local\Temp\BotKiller.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3016-0-0x00007FFD5F52F000-0x00007FFD5F530000-memory.dmp
memory/3016-1-0x00000197DEC70000-0x00000197DEC7A000-memory.dmp
memory/3016-2-0x00007FFD5F3A0000-0x00007FFD5FD44000-memory.dmp
memory/3016-5-0x00000197F9290000-0x00000197F938D000-memory.dmp
memory/3016-4-0x00000197DF0D0000-0x00000197DF0E3000-memory.dmp
memory/3016-7-0x00000197F9530000-0x00000197F95C6000-memory.dmp
memory/3016-8-0x00000197F9530000-0x00000197F9610000-memory.dmp
memory/3016-10-0x00007FFD5F3A0000-0x00007FFD5FD44000-memory.dmp
memory/3016-9-0x00000197E0950000-0x00000197E0993000-memory.dmp
memory/3016-6-0x00000197F9530000-0x00000197F95FB000-memory.dmp
memory/3016-11-0x00007FFD5F3A0000-0x00007FFD5FD44000-memory.dmp
memory/3016-3-0x00000197DF0D0000-0x00000197DF0EF000-memory.dmp
memory/3016-12-0x00000197F9530000-0x00000197F9FC9000-memory.dmp
memory/3016-15-0x00000197E0950000-0x00000197E0961000-memory.dmp
memory/3016-17-0x00000197E0950000-0x00000197E096F000-memory.dmp
memory/3016-21-0x00000197F9530000-0x00000197F962B000-memory.dmp
memory/3016-20-0x00000197E0950000-0x00000197E0988000-memory.dmp
memory/3016-19-0x00000197DF110000-0x00000197DF11A000-memory.dmp
memory/3016-18-0x00000197E0950000-0x00000197E09A3000-memory.dmp
memory/3016-16-0x00000197DF110000-0x00000197DF120000-memory.dmp
memory/3016-14-0x00000197E0950000-0x00000197E0972000-memory.dmp
memory/3016-13-0x00000197E0950000-0x00000197E0970000-memory.dmp
memory/3016-22-0x00007FFD5F3A0000-0x00007FFD5FD44000-memory.dmp
memory/3016-23-0x00007FFD5F3A0000-0x00007FFD5FD44000-memory.dmp