Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
02/10/2026, 16:27
General
- Target CircuitLordVRModInstaller.exe
- Size 337KB
- Sample261002-tyjcmseb64
- SHA256 9bd116ff40fd9e275518782b552e0f2f718b0c36882d15e00078472412001bbe
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\CircuitLordVRModInstaller.exe"C:\Users\Admin\AppData\Local\Temp\CircuitLordVRModInstaller.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4296-1-0x00000224B9540000-0x00000224B959A000-memory.dmp
memory/4296-0-0x00007FFF3E14F000-0x00007FFF3E150000-memory.dmp
memory/4296-2-0x00007FFF3DFC0000-0x00007FFF3E964000-memory.dmp
memory/4296-3-0x00007FFF3DFC0000-0x00007FFF3E964000-memory.dmp
memory/4296-4-0x00007FFF3DFC0000-0x00007FFF3E964000-memory.dmp
memory/4296-5-0x00007FFF3DFC0000-0x00007FFF3E964000-memory.dmp
memory/4296-6-0x00007FFF3DFC0000-0x00007FFF3E964000-memory.dmp
memory/4296-8-0x00000224D4670000-0x00000224D468C000-memory.dmp
memory/4296-7-0x00000224D4730000-0x00000224D47EA000-memory.dmp
memory/4296-9-0x00007FFF3DFC0000-0x00007FFF3E964000-memory.dmp
memory/4296-10-0x00007FFF3DFC0000-0x00007FFF3E964000-memory.dmp
memory/4296-11-0x00007FFF3DFC0000-0x00007FFF3E964000-memory.dmp
memory/4296-13-0x00000224D6B30000-0x00000224D6B3E000-memory.dmp
memory/4296-12-0x00000224D6B60000-0x00000224D6B9E000-memory.dmp
memory/4296-14-0x00000224D6BA0000-0x00000224D6BB2000-memory.dmp
memory/4296-15-0x00000224D7E00000-0x00000224D7E3C000-memory.dmp
memory/4296-17-0x00007FFF3DFC0000-0x00007FFF3E964000-memory.dmp
memory/4296-18-0x00007FFF3DFC0000-0x00007FFF3E964000-memory.dmp
memory/4296-19-0x00007FFF3DFC0000-0x00007FFF3E964000-memory.dmp