Analysis
- max time kernel
150s - max time network
126s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
17/10/2026, 11:20
General
- Target 7db367b4866d3da1db225011ba914c057c842a8aff3609a878331cbe59db6bd8.exe
- Size 1.7MB
- Sample261017-nfdfsaew4w
- SHA256 7db367b4866d3da1db225011ba914c057c842a8aff3609a878331cbe59db6bd8
Malware Config
Signatures
- Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
- Suspicious behavior: EnumeratesProcesses 64 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\7db367b4866d3da1db225011ba914c057c842a8aff3609a878331cbe59db6bd8.exe"C:\Users\Admin\AppData\Local\Temp\7db367b4866d3da1db225011ba914c057c842a8aff3609a878331cbe59db6bd8.exe"1⤵
- Reads the TCP/IP host and domain name from the registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/924-0-0x000001D8688C0000-0x000001D8688FA000-memory.dmp
memory/924-1-0x00007FFE7C94F000-0x00007FFE7C950000-memory.dmp
memory/924-2-0x00007FFE7C7C0000-0x00007FFE7D164000-memory.dmp
memory/924-3-0x00007FFE7C7C0000-0x00007FFE7D164000-memory.dmp
memory/924-4-0x00007FFE7C7C0000-0x00007FFE7D164000-memory.dmp
memory/924-5-0x00007FFE7C7C0000-0x00007FFE7D164000-memory.dmp
memory/924-6-0x00007FFE7C7C0000-0x00007FFE7D164000-memory.dmp
memory/924-7-0x00007FFE7C7C0000-0x00007FFE7D164000-memory.dmp
memory/924-8-0x00007FFE7C7C0000-0x00007FFE7D164000-memory.dmp
memory/924-9-0x000001D86D9E0000-0x000001D86D9E8000-memory.dmp
memory/924-11-0x000001D86DA30000-0x000001D86DA3E000-memory.dmp
memory/924-10-0x000001D86DA60000-0x000001D86DA9E000-memory.dmp
memory/924-12-0x00007FFE7C7C0000-0x00007FFE7D164000-memory.dmp
memory/924-16-0x00007FFE7C7C0000-0x00007FFE7D164000-memory.dmp
memory/924-17-0x00007FFE7C7C0000-0x00007FFE7D164000-memory.dmp
memory/924-18-0x000001D86F0E0000-0x000001D86F120000-memory.dmp
memory/924-19-0x00007FFE7C7C0000-0x00007FFE7D164000-memory.dmp
memory/924-20-0x00007FFE7C7C0000-0x00007FFE7D164000-memory.dmp
memory/924-22-0x00007FFE7C7C0000-0x00007FFE7D164000-memory.dmp
memory/924-23-0x00007FFE7C7C0000-0x00007FFE7D164000-memory.dmp
memory/924-24-0x00007FFE7C7C0000-0x00007FFE7D164000-memory.dmp
memory/924-25-0x00007FFE7C7C0000-0x00007FFE7D164000-memory.dmp