Analysis
- user interaction
yes - max time kernel
15s - max time network
20s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
- submitted
12/10/2026, 17:38
Errors
General
- Target i wont lock your computer trust me im a cute girl uwu.exe
- Size 81.8MB
- Sample261012-v778ssec86
- SHA256 851d74287a07f49bc8457d4012d4bc4d5550f28d80f0831d78391cda35801f0d
Malware Config
Signatures
- Loads dropped DLL 6 IoCs
- Drops file in Windows directory 1 IoCs
- Modifies data under HKEY_USERS 15 IoCs
- Suspicious behavior: EnumeratesProcesses 2 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of SetWindowsHookEx 4 IoCs
- Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
Processes
-
C:\Users\Admin\AppData\Local\Temp\i wont lock your computer trust me im a cute girl uwu.exe"C:\Users\Admin\AppData\Local\Temp\i wont lock your computer trust me im a cute girl uwu.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\LogonUI.exe"LogonUI.exe" /flags:0x4 /state0:0xa3996855 /state1:0x41c64e6d1⤵
- Drops file in Windows directory
- Modifies data under HKEY_USERS
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
evbDA6E.tmp
evbDBA7.tmp
evbDC06.tmp
evbDF24.tmp
evbDF44.tmp
evbDFD2.tmp
memory/1704-52-0x0000000002400000-0x00000000024A5000-memory.dmp
memory/1704-7-0x0000000180000000-0x000000018123C000-memory.dmp
memory/1704-16-0x00000000023C0000-0x00000000023E2000-memory.dmp
memory/1704-14-0x00000000023C0000-0x00000000023E2000-memory.dmp
memory/1704-12-0x00007FFA510B0000-0x00007FFA512A5000-memory.dmp
memory/1704-21-0x00000000029E0000-0x0000000003AD1000-memory.dmp
memory/1704-34-0x0000000003AE0000-0x0000000003D23000-memory.dmp
memory/1704-32-0x0000000180000000-0x000000018123C000-memory.dmp
memory/1704-56-0x00000000023C0000-0x00000000023E2000-memory.dmp
memory/1704-55-0x00007FFA510B0000-0x00007FFA512A5000-memory.dmp
memory/1704-0-0x0000000140000000-0x00000001400CD000-memory.dmp
memory/1704-49-0x0000000002400000-0x00000000024A5000-memory.dmp
memory/1704-48-0x0000000003D30000-0x0000000003ECB000-memory.dmp
memory/1704-18-0x00007FFA510B0000-0x00007FFA512A5000-memory.dmp
memory/1704-43-0x0000000003D30000-0x0000000003ECB000-memory.dmp
memory/1704-40-0x0000000003D30000-0x0000000003ECB000-memory.dmp
memory/1704-6-0x00007FFA510B0000-0x00007FFA512A5000-memory.dmp
memory/1704-58-0x00000000029E0000-0x0000000003AD1000-memory.dmp
memory/1704-60-0x0000000002400000-0x00000000024A5000-memory.dmp
memory/1704-59-0x0000000003AE0000-0x0000000003D23000-memory.dmp
memory/1704-24-0x00000000029E0000-0x0000000003AD1000-memory.dmp
memory/1704-29-0x0000000003AE0000-0x0000000003D23000-memory.dmp
memory/1704-3-0x00007FFA5114D000-0x00007FFA5114E000-memory.dmp
memory/1704-66-0x0000000003D30000-0x0000000003ECB000-memory.dmp
memory/1704-69-0x00007FFA510B0000-0x00007FFA512A5000-memory.dmp
memory/1704-62-0x0000000180000000-0x000000018123C000-memory.dmp
memory/1704-68-0x0000000140000000-0x00000001400CD000-memory.dmp
memory/1704-64-0x00000000029E0000-0x0000000003AD1000-memory.dmp