Analysis
- user interaction
yes - max time kernel
46s - max time network
45s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
- submitted
30/09/2026, 13:01
General
- Target D3DHost.exe
- Size 39.9MB
- Sample260930-p9d5vazeka
- SHA256 fbc0742ecc3fe42db0b0b4e97978b0dff94b1f76ad6d6c8f7a0df19708011fca
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: EnumeratesProcesses 4 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 6 IoCs
- Suspicious use of SendNotifyMessage 6 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\D3DHost.exe"C:\Users\Admin\AppData\Local\Temp\D3DHost.exe"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
settings.ini.lock
memory/628-2-0x0000024193EB0000-0x00000241940B2000-memory.dmp
memory/628-1-0x0000024193A60000-0x0000024193EA2000-memory.dmp
memory/628-57-0x0000024194E70000-0x0000024194E71000-memory.dmp
memory/628-56-0x0000024194E70000-0x0000024194E71000-memory.dmp
memory/628-58-0x0000024194E70000-0x0000024194E71000-memory.dmp
memory/628-77-0x0000024195BA0000-0x0000024195BA1000-memory.dmp
memory/628-76-0x0000024195BA0000-0x0000024195BA1000-memory.dmp
memory/628-74-0x0000024195B90000-0x0000024195B91000-memory.dmp
memory/628-73-0x0000024195B90000-0x0000024195B91000-memory.dmp
memory/628-72-0x0000024195B80000-0x0000024195B81000-memory.dmp
memory/628-71-0x0000024195B60000-0x0000024195B61000-memory.dmp
memory/628-70-0x0000024195B90000-0x0000024195B91000-memory.dmp
memory/628-68-0x0000024195B80000-0x0000024195B81000-memory.dmp
memory/628-67-0x0000024195B80000-0x0000024195B81000-memory.dmp
memory/628-64-0x0000024195B60000-0x0000024195B61000-memory.dmp
memory/628-63-0x0000024195B60000-0x0000024195B61000-memory.dmp
memory/628-60-0x0000024194E70000-0x0000024194E71000-memory.dmp
memory/628-59-0x0000024194E70000-0x0000024194E71000-memory.dmp
memory/628-80-0x0000024195BA0000-0x0000024195BA1000-memory.dmp
memory/628-79-0x00000241A6F70000-0x00000241A6F71000-memory.dmp
memory/628-82-0x0000024195B80000-0x0000024195B81000-memory.dmp
memory/628-81-0x0000024194E70000-0x0000024194E71000-memory.dmp
memory/628-85-0x00000241A6F70000-0x00000241A6F71000-memory.dmp
memory/628-84-0x00000241A6F70000-0x00000241A6F71000-memory.dmp
memory/628-128-0x00000241A6FD0000-0x00000241A6FD1000-memory.dmp
memory/628-130-0x00000241A6FC0000-0x00000241A6FC1000-memory.dmp
memory/628-129-0x00000241A6FC0000-0x00000241A6FC1000-memory.dmp
memory/628-127-0x00000241A6FD0000-0x00000241A6FD1000-memory.dmp
memory/628-125-0x00000241A6FC0000-0x00000241A6FC1000-memory.dmp
memory/628-124-0x00000241A6FB0000-0x00000241A6FB1000-memory.dmp
memory/628-123-0x00000241A6FC0000-0x00000241A6FC1000-memory.dmp
memory/628-122-0x00000241A6FC0000-0x00000241A6FC1000-memory.dmp
memory/628-121-0x00000241A6FC0000-0x00000241A6FC1000-memory.dmp
memory/628-120-0x00000241A6FC0000-0x00000241A6FC1000-memory.dmp
memory/628-119-0x00000241A6FC0000-0x00000241A6FC1000-memory.dmp
memory/628-118-0x00000241A6FC0000-0x00000241A6FC1000-memory.dmp
memory/628-117-0x00000241A6FC0000-0x00000241A6FC1000-memory.dmp
memory/628-115-0x00000241A6FB0000-0x00000241A6FB1000-memory.dmp
memory/628-114-0x00000241A6FB0000-0x00000241A6FB1000-memory.dmp
memory/628-113-0x00000241A6FB0000-0x00000241A6FB1000-memory.dmp
memory/628-112-0x00000241A6FB0000-0x00000241A6FB1000-memory.dmp
memory/628-111-0x00000241A6FB0000-0x00000241A6FB1000-memory.dmp
memory/628-110-0x00000241A6FA0000-0x00000241A6FA1000-memory.dmp
memory/628-109-0x00000241A6FB0000-0x00000241A6FB1000-memory.dmp
memory/628-107-0x00000241A6F80000-0x00000241A6F81000-memory.dmp
memory/628-106-0x00000241A6FA0000-0x00000241A6FA1000-memory.dmp
memory/628-105-0x0000024194E70000-0x0000024194E71000-memory.dmp
memory/628-104-0x00000241A6FA0000-0x00000241A6FA1000-memory.dmp
memory/628-103-0x0000024195BA0000-0x0000024195BA1000-memory.dmp
memory/628-102-0x00000241A6F90000-0x00000241A6F91000-memory.dmp
memory/628-101-0x00000241A6F80000-0x00000241A6F81000-memory.dmp
memory/628-99-0x00000241A6FA0000-0x00000241A6FA1000-memory.dmp
memory/628-97-0x00000241A6F80000-0x00000241A6F81000-memory.dmp
memory/628-96-0x00000241A6F80000-0x00000241A6F81000-memory.dmp
memory/628-95-0x00000241A6F90000-0x00000241A6F91000-memory.dmp
memory/628-100-0x00000241A6FA0000-0x00000241A6FA1000-memory.dmp
memory/628-94-0x00000241A6F90000-0x00000241A6F91000-memory.dmp
memory/628-92-0x00000241A6F80000-0x00000241A6F81000-memory.dmp
memory/628-91-0x00000241A6F80000-0x00000241A6F81000-memory.dmp
memory/628-90-0x00000241A6F80000-0x00000241A6F81000-memory.dmp
memory/628-89-0x00000241A6F80000-0x00000241A6F81000-memory.dmp
memory/628-87-0x00000241A6F70000-0x00000241A6F71000-memory.dmp
memory/628-86-0x00000241A6F70000-0x00000241A6F71000-memory.dmp
memory/628-83-0x0000024195B90000-0x0000024195B91000-memory.dmp
memory/628-155-0x00000241A76C0000-0x00000241A76D0000-memory.dmp
memory/628-156-0x00000241A76C0000-0x00000241A76D0000-memory.dmp