Analysis
- max time kernel
152s - max time network
142s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
18/10/2026, 17:51
General
- Target PXPlay_Windows_setup_v3.1.0.exe
- Size 345.8MB
- Sample261018-wfeylssxes
- SHA256 d6975e4a5fca4d6cee3bac23c2f163db17acc12f2cf23f8f29287be4f9a9c696
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
- Inno Setup is an open-source installation builder for Windows applications. 2 IoCs
Inno Setup installer
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\PXPlay_Windows_setup_v3.1.0.exe"C:\Users\Admin\AppData\Local\Temp\PXPlay_Windows_setup_v3.1.0.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\is-I5AYR4TKKH.tmp\PXPlay_Windows_setup_v3.1.0.tmp"C:\Users\Admin\AppData\Local\Temp\is-I5AYR4TKKH.tmp\PXPlay_Windows_setup_v3.1.0.tmp" /SL5="$5001E,360930700,1446912,C:\Users\Admin\AppData\Local\Temp\PXPlay_Windows_setup_v3.1.0.exe"2⤵
- Executes dropped EXE
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
PXPlay_Windows_setup_v3.1.0.tmp
memory/4276-6-0x0000000000330000-0x00000000004A7000-memory.dmp
memory/4276-0-0x0000000000330000-0x00000000004A7000-memory.dmp
memory/4812-14-0x00000000003C0000-0x0000000000A80000-memory.dmp
memory/4812-18-0x00000000003C0000-0x0000000000A80000-memory.dmp
memory/4812-8-0x000001EAEBC00000-0x000001EAEBC01000-memory.dmp
memory/4812-10-0x00000000003C0000-0x0000000000A80000-memory.dmp
memory/4812-12-0x00000000003C0000-0x0000000000A80000-memory.dmp
memory/4812-5-0x000001EAEBC00000-0x000001EAEBC01000-memory.dmp
memory/4812-16-0x00000000003C0000-0x0000000000A80000-memory.dmp
memory/4812-7-0x00000000003C0000-0x0000000000A80000-memory.dmp
memory/4812-21-0x00000000003C0000-0x0000000000A80000-memory.dmp
memory/4812-23-0x00000000003C0000-0x0000000000A80000-memory.dmp
memory/4812-25-0x00000000003C0000-0x0000000000A80000-memory.dmp
memory/4812-27-0x00000000003C0000-0x0000000000A80000-memory.dmp
memory/4812-29-0x00000000003C0000-0x0000000000A80000-memory.dmp
memory/4812-31-0x00000000003C0000-0x0000000000A80000-memory.dmp
memory/4812-33-0x00000000003C0000-0x0000000000A80000-memory.dmp
memory/4812-35-0x00000000003C0000-0x0000000000A80000-memory.dmp