Analysis
- max time kernel
149s - max time network
127s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
20/10/2026, 16:50
General
- Target [email protected]
- Size 550KB
- Sample261020-vb9fzstw7r
- SHA256 f2665f89ba53abd3deb81988c0d5194992214053e77fc89b98b64a31a7504d77
Malware Config
Signatures
- Family: Chaos
Ransomware family first seen in June 2021.
- Chaos Ransomware 1 IoCs
- Suspicious behavior: EnumeratesProcesses 31 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\[email protected]"C:\Users\Admin\AppData\Local\Temp\[email protected]"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4508-0-0x00007FF82140F000-0x00007FF821410000-memory.dmp
memory/4508-1-0x00000000004E0000-0x000000000056E000-memory.dmp
memory/4508-2-0x00007FF821280000-0x00007FF821C24000-memory.dmp
memory/4508-3-0x00007FF821280000-0x00007FF821C24000-memory.dmp
memory/4508-4-0x00007FF821280000-0x00007FF821C24000-memory.dmp
memory/4508-5-0x00007FF821280000-0x00007FF821C24000-memory.dmp
memory/4508-6-0x00007FF821280000-0x00007FF821C24000-memory.dmp
memory/4508-7-0x00007FF821280000-0x00007FF821C24000-memory.dmp
memory/4508-8-0x00007FF821280000-0x00007FF821C24000-memory.dmp
memory/4508-9-0x00007FF821280000-0x00007FF821C24000-memory.dmp
memory/4508-10-0x00007FF821280000-0x00007FF821C24000-memory.dmp
memory/4508-11-0x00007FF821280000-0x00007FF821C24000-memory.dmp
memory/4508-12-0x00007FF821280000-0x00007FF821C24000-memory.dmp
memory/4508-13-0x00007FF821280000-0x00007FF821C24000-memory.dmp
memory/4508-14-0x00007FF821280000-0x00007FF821C24000-memory.dmp