Analysis
- user interaction
yes - max time kernel
149s - max time network
143s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
14/10/2026, 01:01
General
- Target Screamer1.exe
- Size 844KB
- Sample261014-bdjtkaev8q
- SHA256 00201a2fd4916193c9c7bbba7be6a77fa5876085480b67da4e1228fd8b23ae5f
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Screamer1.exe"C:\Users\Admin\AppData\Local\Temp\Screamer1.exe"1⤵
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x00000000000004FC 0x00000000000005001⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4804-0-0x00007FFF2DC4A000-0x00007FFF2DC4B000-memory.dmp
memory/4804-2-0x00007FFF2D950000-0x00007FFF2E388000-memory.dmp
memory/4804-1-0x000000001B1B0000-0x000000001B256000-memory.dmp
memory/4804-3-0x000000001B730000-0x000000001BBFE000-memory.dmp
memory/4804-5-0x000000001BD50000-0x000000001BDEC000-memory.dmp
memory/4804-4-0x00007FFF2D950000-0x00007FFF2E388000-memory.dmp
memory/4804-6-0x0000000000C00000-0x0000000000C08000-memory.dmp
memory/4804-8-0x000000001BEB0000-0x000000001BEFC000-memory.dmp
memory/4804-7-0x00007FFF2D950000-0x00007FFF2E388000-memory.dmp
memory/4804-9-0x00007FFF2D950000-0x00007FFF2E388000-memory.dmp
memory/4804-10-0x00007FFF2D950000-0x00007FFF2E388000-memory.dmp
memory/4804-11-0x00007FFF2D950000-0x00007FFF2E388000-memory.dmp
memory/4804-12-0x00007FFF2D950000-0x00007FFF2E388000-memory.dmp
memory/4804-13-0x00007FFF2D950000-0x00007FFF2E388000-memory.dmp
memory/4804-14-0x00007FFF2D950000-0x00007FFF2E388000-memory.dmp
memory/4804-15-0x00007FFF2D950000-0x00007FFF2E388000-memory.dmp
memory/4804-17-0x00007FFF2D950000-0x00007FFF2E388000-memory.dmp
memory/4804-18-0x00007FFF2D950000-0x00007FFF2E388000-memory.dmp
memory/4804-19-0x00007FFF2D950000-0x00007FFF2E388000-memory.dmp
memory/4804-16-0x00007FFF2D950000-0x00007FFF2E388000-memory.dmp
memory/4804-20-0x00007FFF2D950000-0x00007FFF2E388000-memory.dmp
memory/4804-21-0x00007FFF2D950000-0x00007FFF2E388000-memory.dmp