Analysis
- max time kernel
150s - max time network
145s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
30/09/2026, 11:40
General
- Target 795563fa089639281db1062746808f5c1fd55bc81f2faf1fe260cc5fb981a834.exe
- Size 3.7MB
- Sample260930-ns52kavape
- SHA256 795563fa089639281db1062746808f5c1fd55bc81f2faf1fe260cc5fb981a834
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 TTPs 16 IoCs
- Drops file in Windows directory 1 IoCs
- Suspicious use of SetWindowsHookEx 64 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\795563fa089639281db1062746808f5c1fd55bc81f2faf1fe260cc5fb981a834.exe"C:\Users\Admin\AppData\Local\Temp\795563fa089639281db1062746808f5c1fd55bc81f2faf1fe260cc5fb981a834.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Drops file in Windows directory
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3552-0-0x00007FF6386C0000-0x00007FF639791000-memory.dmp
memory/3552-1-0x00007FF4DC6D0000-0x00007FF4DCAA1000-memory.dmp
memory/3552-3-0x00007FFCD1060000-0x00007FFCD12C3000-memory.dmp
memory/3552-2-0x00007FFCD11BF000-0x00007FFCD11C0000-memory.dmp
memory/3552-6-0x00007FFCD1060000-0x00007FFCD12C3000-memory.dmp
memory/3552-11-0x00007FFCD1060000-0x00007FFCD12C3000-memory.dmp
memory/3552-8-0x00007FFCD1060000-0x00007FFCD12C3000-memory.dmp
memory/3552-10-0x00007FFCD1060000-0x00007FFCD12C3000-memory.dmp
memory/3552-9-0x00007FFCD1060000-0x00007FFCD12C3000-memory.dmp
memory/3552-4-0x00007FF6386C0000-0x00007FF639791000-memory.dmp
memory/3552-5-0x00007FF6386C0000-0x00007FF639791000-memory.dmp
memory/3552-16-0x00007FFCD1060000-0x00007FFCD12C3000-memory.dmp
memory/3552-7-0x00007FF6386C0000-0x00007FF639791000-memory.dmp
memory/3552-17-0x00007FFCD1060000-0x00007FFCD12C3000-memory.dmp
memory/3552-18-0x00007FFCD1060000-0x00007FFCD12C3000-memory.dmp
memory/3552-19-0x00007FF6386C0000-0x00007FF639791000-memory.dmp
memory/3552-21-0x000001EEF84F0000-0x000001EEF8649000-memory.dmp
memory/3552-20-0x00007FF6386C0000-0x00007FF639791000-memory.dmp
memory/3552-22-0x00007FF4DC6D0000-0x00007FF4DCAA1000-memory.dmp
memory/3552-23-0x00007FFCD1060000-0x00007FFCD12C3000-memory.dmp
memory/3552-24-0x00007FFCD11BF000-0x00007FFCD11C0000-memory.dmp
memory/3552-25-0x00007FFCD1060000-0x00007FFCD12C3000-memory.dmp
memory/3552-26-0x00007FFCD1060000-0x00007FFCD12C3000-memory.dmp
memory/3552-28-0x000001EEF84F0000-0x000001EEF8649000-memory.dmp
memory/3552-27-0x00007FF6386C0000-0x00007FF639791000-memory.dmp
memory/3552-29-0x00007FF6386C0000-0x00007FF639791000-memory.dmp
memory/3552-31-0x00007FF6386C0000-0x00007FF639791000-memory.dmp
memory/3552-33-0x00007FF6386C0000-0x00007FF639791000-memory.dmp
memory/3552-35-0x00007FF6386C0000-0x00007FF639791000-memory.dmp
memory/3552-37-0x00007FF6386C0000-0x00007FF639791000-memory.dmp
memory/3552-39-0x00007FF6386C0000-0x00007FF639791000-memory.dmp
memory/3552-41-0x00007FF6386C0000-0x00007FF639791000-memory.dmp
memory/3552-43-0x00007FF6386C0000-0x00007FF639791000-memory.dmp
memory/3552-45-0x00007FF6386C0000-0x00007FF639791000-memory.dmp
memory/3552-47-0x00007FF6386C0000-0x00007FF639791000-memory.dmp
memory/3552-49-0x00007FF6386C0000-0x00007FF639791000-memory.dmp
memory/3552-51-0x00007FF6386C0000-0x00007FF639791000-memory.dmp