Analysis
- user interaction
yes - max time kernel
58s - max time network
57s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
20/10/2026, 16:17
General
- Target Phena Tomic.rar
- Size 27.1MB
- Sample261020-trwpdsbz5s
- SHA256 0c052d7e15f9c96002224d92812dec601b019bbd7717c70c2fd02e4e9151bcf5
Score
7/10
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
- Modifies registry class 1 IoCs
- Suspicious behavior: EnumeratesProcesses 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of AdjustPrivilegeToken 5 IoCs
- Suspicious use of FindShellTrayWindow 3 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Phena Tomic.rar"1⤵
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
-
C:\Users\Admin\Desktop\Phena Tomic.exe"C:\Users\Admin\Desktop\Phena Tomic.exe"1⤵
- Executes dropped EXE
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3220-4-0x00007FFDBB49F000-0x00007FFDBB4A0000-memory.dmp
memory/3220-5-0x00007FFDBB310000-0x00007FFDBBCB4000-memory.dmp
memory/3220-6-0x0000028FA6210000-0x0000028FA9F4C000-memory.dmp
memory/3220-7-0x00007FFDBB310000-0x00007FFDBBCB4000-memory.dmp
memory/3220-8-0x00007FFDBB310000-0x00007FFDBBCB4000-memory.dmp
memory/3220-9-0x00007FFDBB310000-0x00007FFDBBCB4000-memory.dmp