Analysis

  • max time kernel
    148s
  • max time network
    141s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    30/09/2026, 07:32

General

  • Target
    fc751a1ce636ddf0160bfc33a87b4c33f29595b0c508cc97af430fb3e930b09d.exe
  • Size 15.7MB
  • Sample260930-jdfe5svzbw
  • SHA256 fc751a1ce636ddf0160bfc33a87b4c33f29595b0c508cc97af430fb3e930b09d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 8 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\fc751a1ce636ddf0160bfc33a87b4c33f29595b0c508cc97af430fb3e930b09d.exe
    "C:\Users\Admin\AppData\Local\Temp\fc751a1ce636ddf0160bfc33a87b4c33f29595b0c508cc97af430fb3e930b09d.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: GetForegroundWindowSpam
    PID:4448

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        config.ini

        • Path C:\Users\Admin\AppData\Local\雪梨助手插件\config.ini
        • Size 28B
        • SHA256 b1fd6abd3baf96270659663223c718c4aee33e2e7ed43bc69b74ca450539aa57
        • MD5 SHA1 SHA512

        memory/4448-2-0x00007FFD8DF20000-0x00007FFD8DF22000-memory.dmp

        memory/4448-1-0x00007FFD8DF10000-0x00007FFD8DF12000-memory.dmp

        memory/4448-4-0x00007FFD8C8B0000-0x00007FFD8C8B2000-memory.dmp

        memory/4448-5-0x00007FFD8B710000-0x00007FFD8B712000-memory.dmp

        memory/4448-6-0x00007FFD8B720000-0x00007FFD8B722000-memory.dmp

        memory/4448-3-0x00007FFD8C8A0000-0x00007FFD8C8A2000-memory.dmp

        memory/4448-0-0x00007FF670934000-0x00007FF671369000-memory.dmp

        memory/4448-7-0x00007FF670690000-0x00007FF672328000-memory.dmp

        memory/4448-11-0x00007FF670690000-0x00007FF672328000-memory.dmp

        memory/4448-330-0x00007FF670934000-0x00007FF671369000-memory.dmp

        memory/4448-331-0x00007FF670690000-0x00007FF672328000-memory.dmp