Analysis
- max time kernel
4s - max time network
129s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
25/09/2026, 14:26
General
- Target GnSetup.exe
- Size 48.1MB
- Sample260925-rsbdqszz2j
- SHA256 6a8e0394417a483a0fe584bd162834fb3ec0d6f51f4f8dbe5999b2ec353022f3
Malware Config
Signatures
- Loads dropped DLL 3 IoCs
- Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\GnSetup.exe"C:\Users\Admin\AppData\Local\Temp\GnSetup.exe"1⤵
- Loads dropped DLL
- Suspicious use of FindShellTrayWindow
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
av_libglesv2.dll
libHarfBuzzSharp.dll
libSkiaSharp.dll
memory/3336-35-0x00000183E99D0000-0x00000183E9A10000-memory.dmp
memory/3336-55-0x0000018398100000-0x0000018398130000-memory.dmp
memory/3336-31-0x00000183E9210000-0x00000183E9230000-memory.dmp
memory/3336-7-0x00000183E50E0000-0x00000183E5100000-memory.dmp
memory/3336-27-0x00000183E91D0000-0x00000183E91F0000-memory.dmp
memory/3336-40-0x00000183947B0000-0x0000018394860000-memory.dmp
memory/3336-3-0x00000183E8170000-0x00000183E90C0000-memory.dmp
memory/3336-15-0x00000183E6B10000-0x00000183E6B60000-memory.dmp
memory/3336-45-0x0000018394950000-0x0000018394960000-memory.dmp
memory/3336-19-0x00000183E7170000-0x00000183E71C0000-memory.dmp
memory/3336-51-0x0000018398420000-0x00000183984E0000-memory.dmp
memory/3336-11-0x00000183E6920000-0x00000183E6950000-memory.dmp
memory/3336-23-0x00000183E69D0000-0x00000183E69F0000-memory.dmp
memory/3336-62-0x0000018398610000-0x00000183987C0000-memory.dmp
memory/3336-66-0x000001839AA00000-0x000001839AA40000-memory.dmp
memory/3336-75-0x000001839AC40000-0x000001839ACE0000-memory.dmp
memory/3336-78-0x000001839B060000-0x000001839B2D0000-memory.dmp
memory/3336-82-0x000001839B790000-0x000001839BB10000-memory.dmp
memory/3336-70-0x000001839AB10000-0x000001839AB90000-memory.dmp
memory/3336-86-0x000001839B340000-0x000001839B370000-memory.dmp
memory/3336-90-0x000001839B3D0000-0x000001839B400000-memory.dmp