Analysis
- user interaction
yes - max time kernel
16s - max time network
17s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
- submitted
30/09/2026, 15:36
General
- Target stress.exe
- Size 84KB
- Sample260930-s186eaws3k
- SHA256 5bf79b57699a391f0844e7f6e81cbefa688f634ba2f9813f2fb1e712967fd4c7
Score
1/10
Malware Config
Signatures
- Checks SCSI registry key(s) 3 TTPs 3 IoCs
SCSI information is often read in order to detect sandboxing environments.
- Suspicious behavior: EnumeratesProcesses 16 IoCs
- Suspicious use of AdjustPrivilegeToken 3 IoCs
- Suspicious use of FindShellTrayWindow 27 IoCs
- Suspicious use of SendNotifyMessage 27 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\stress.exe"C:\Users\Admin\AppData\Local\Temp\stress.exe"1⤵
-
C:\Windows\system32\taskmgr.exe"C:\Windows\system32\taskmgr.exe" /41⤵
- Checks SCSI registry key(s)
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4540-2-0x0000017F3F490000-0x0000017F3F491000-memory.dmp
memory/4540-1-0x0000017F3F490000-0x0000017F3F491000-memory.dmp
memory/4540-0-0x0000017F3F490000-0x0000017F3F491000-memory.dmp
memory/4540-6-0x0000017F3F490000-0x0000017F3F491000-memory.dmp
memory/4540-12-0x0000017F3F490000-0x0000017F3F491000-memory.dmp
memory/4540-11-0x0000017F3F490000-0x0000017F3F491000-memory.dmp
memory/4540-10-0x0000017F3F490000-0x0000017F3F491000-memory.dmp
memory/4540-9-0x0000017F3F490000-0x0000017F3F491000-memory.dmp
memory/4540-8-0x0000017F3F490000-0x0000017F3F491000-memory.dmp
memory/4540-7-0x0000017F3F490000-0x0000017F3F491000-memory.dmp