Analysis
- max time kernel
148s - max time network
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
02/10/2026, 14:16
General
- Target System.Data.SQLite.Vfs.Async/System.Data.SQLite.Vfs.Async.Test/bin/Release/System.Data.SQLite.Vfs.Async.Test.exe
- Size 7KB
- Sample261002-rk66fazbme
- SHA256 e54c5e677b03867bed295acfeb35db75494eaa421e8802886a077037d791017e
Score
1/10
Malware Config
Signatures
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\System.Data.SQLite.Vfs.Async\System.Data.SQLite.Vfs.Async.Test\bin\Release\System.Data.SQLite.Vfs.Async.Test.exe"C:\Users\Admin\AppData\Local\Temp\System.Data.SQLite.Vfs.Async\System.Data.SQLite.Vfs.Async.Test\bin\Release\System.Data.SQLite.Vfs.Async.Test.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\dw20.exedw20.exe -x -s 8162⤵
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/960-0-0x00007FFED5EEA000-0x00007FFED5EEB000-memory.dmp
memory/960-1-0x0000000001350000-0x0000000001359000-memory.dmp
memory/960-2-0x00007FFED5BF0000-0x00007FFED6628000-memory.dmp
memory/960-3-0x00007FFED5BF0000-0x00007FFED6628000-memory.dmp
memory/960-6-0x00007FFED5BF0000-0x00007FFED6628000-memory.dmp