Analysis
- user interaction
yes - max time kernel
899s - max time network
490s - platform
windows11-21h2_x64 - resource
win11-20260911-en - resource tags
- submitted
25/09/2026, 23:16
General
- Target Galaxy Swapper v2 (1).exe
- Size 11.9MB
- Sample260925-284ekaab94
- SHA256 10838c8072107a8bf671cc9c4cfa241cef1a6cca04c90ceb0fe2d17b37d6a9a8
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 1 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Galaxy Swapper v2 (1).exe"C:\Users\Admin\AppData\Local\Temp\Galaxy Swapper v2 (1).exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5132-0-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-5-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-7-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-8-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-13-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-18-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-17-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-25-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-21-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-20-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-19-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-15-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-16-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-14-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-12-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-11-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-10-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-9-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-6-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-4-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-3-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-26-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-28-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-29-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-27-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-22-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-24-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-23-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-47-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-58-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-60-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-63-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-65-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-64-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-62-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-61-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-57-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-49-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-56-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-55-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-54-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-53-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-52-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-46-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-33-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-59-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-51-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-50-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-45-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-44-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-43-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-42-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-41-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-40-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-39-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-38-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-34-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-32-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-31-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-48-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-35-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-36-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-30-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp
memory/5132-37-0x0000021FB21B0000-0x0000021FB2A10000-memory.dmp