Analysis
- user interaction
yes - max time kernel
9s - max time network
12s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
- submitted
30/09/2026, 11:09
General
- Target GarrycatTool.exe
- Size 343KB
- Sample260930-m84b8sdf98
- SHA256 66a68d35576a039df8ad8255746d70c744886f9d79d32eff075ae6be75f5535c
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\GarrycatTool.exe"C:\Users\Admin\AppData\Local\Temp\GarrycatTool.exe"1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4032-0-0x0000019785740000-0x0000019785750000-memory.dmp
memory/4032-16-0x0000019785840000-0x0000019785850000-memory.dmp
memory/4032-35-0x0000019795BD0000-0x0000019795BD1000-memory.dmp
memory/4032-36-0x0000019795CE0000-0x0000019795CE1000-memory.dmp
memory/4032-34-0x0000019795BD0000-0x0000019795BD1000-memory.dmp
memory/4032-32-0x0000019795BA0000-0x0000019795BA1000-memory.dmp