Analysis
- user interaction
yes - max time kernel
150s - max time network
144s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
16/10/2026, 23:00
General
- Target Duck's DMA Test Tool.exe
- Size 10.9MB
- Sample261016-2yxt2aex2z
- SHA256 abf05c143d7ac03ba415ccc73b011d5171d831cf9886c2aba073105554efc9a2
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Duck's DMA Test Tool.exe"C:\Users\Admin\AppData\Local\Temp\Duck's DMA Test Tool.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4176-4-0x00007FFBA41C0000-0x00007FFBA41C2000-memory.dmp
memory/4176-3-0x000000014002B000-0x0000000140819000-memory.dmp
memory/4176-2-0x00007FFBA41B0000-0x00007FFBA41B2000-memory.dmp
memory/4176-1-0x00007FFBA41A0000-0x00007FFBA41A2000-memory.dmp
memory/4176-0-0x00007FFBA4190000-0x00007FFBA4192000-memory.dmp
memory/4176-6-0x00007FFBA41E0000-0x00007FFBA41E2000-memory.dmp
memory/4176-5-0x00007FFBA41D0000-0x00007FFBA41D2000-memory.dmp
memory/4176-7-0x00007FFBA41F0000-0x00007FFBA41F2000-memory.dmp
memory/4176-8-0x00007FFBA4200000-0x00007FFBA4202000-memory.dmp
memory/4176-9-0x00007FFBA4210000-0x00007FFBA4212000-memory.dmp
memory/4176-15-0x00007FFBA4270000-0x00007FFBA4272000-memory.dmp
memory/4176-10-0x00007FFBA4220000-0x00007FFBA4222000-memory.dmp
memory/4176-12-0x00007FFBA4240000-0x00007FFBA4242000-memory.dmp
memory/4176-14-0x00007FFBA4260000-0x00007FFBA4262000-memory.dmp
memory/4176-13-0x00007FFBA4250000-0x00007FFBA4252000-memory.dmp
memory/4176-11-0x00007FFBA4230000-0x00007FFBA4232000-memory.dmp
memory/4176-17-0x00007FFBA4290000-0x00007FFBA4292000-memory.dmp
memory/4176-20-0x00007FFBA42C0000-0x00007FFBA42C2000-memory.dmp
memory/4176-21-0x00000000007B0000-0x00000000007D7000-memory.dmp
memory/4176-19-0x00007FFBA42B0000-0x00007FFBA42B2000-memory.dmp
memory/4176-18-0x00007FFBA42A0000-0x00007FFBA42A2000-memory.dmp
memory/4176-16-0x00007FFBA4280000-0x00007FFBA4282000-memory.dmp
memory/4176-27-0x00000000007B0000-0x00000000007D7000-memory.dmp
memory/4176-28-0x00000000022F0000-0x000000000252B000-memory.dmp
memory/4176-34-0x00000000022F0000-0x000000000252B000-memory.dmp
memory/4176-35-0x0000000140000000-0x00000001412F4000-memory.dmp
memory/4176-45-0x0000000000AE0000-0x0000000000B61000-memory.dmp
memory/4176-52-0x0000000000AE0000-0x0000000000B61000-memory.dmp
memory/4176-44-0x0000000000AE0000-0x0000000000AEA000-memory.dmp
memory/4176-38-0x0000000000AE0000-0x0000000000AEA000-memory.dmp
memory/4176-53-0x000000014002B000-0x0000000140819000-memory.dmp