Analysis

  • max time kernel
    1s
  • max time network
    47s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    22/10/2026, 22:45

General

  • Target
    bin/audacious.exe
  • Size 185KB
  • Sample261022-2phzhsvtet
  • SHA256 e7644bbbca0879a68f9c3c0aa8a379f6c7bfe82178321ae259943ae84ccb46b3
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\bin\audacious.exe
    "C:\Users\Admin\AppData\Local\Temp\bin\audacious.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1792
    • C:\Users\Admin\AppData\Local\Temp\bin\gdbus.exe
      "C:\Users\Admin\AppData\Local\Temp\bin\gdbus.exe" _win32_run_session_bus
      2⤵
        PID:548

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          org_gtk_gdbus_general

          • Path C:\Users\Admin\.dbus-keyrings\org_gtk_gdbus_general
          • Size 78B
          • SHA256 00600e1e13b149031f8f75a8974d48ded3216d307b90a873adcc9032999abc1f
          • MD5 SHA1 SHA512 TLSH

          gdbus-nonce-file-QLUSX3

          • Path C:\Users\Admin\AppData\Local\Temp\gdbus-nonce-file-QLUSX3
          • Size 16B
          • SHA256 8c96871c5b952eb5666eb8bfdc33af3fc3c39125ef23b65081aa8a43be02f402
          • MD5 SHA1 SHA512

          memory/548-70-0x00007FFAB9B20000-0x00007FFAB9B72000-memory.dmp

          memory/548-69-0x00007FF7CC7D0000-0x00007FF7CC7E4000-memory.dmp

          memory/1792-0-0x00007FFAAB770000-0x00007FFAAB95D000-memory.dmp

          memory/1792-7-0x00007FFAA1CB0000-0x00007FFAA2409000-memory.dmp

          memory/1792-8-0x00007FF6011C0000-0x00007FF6011F5000-memory.dmp

          memory/1792-10-0x00007FFAB9BE0000-0x00007FFAB9BF6000-memory.dmp

          memory/1792-9-0x00007FFAB9C00000-0x00007FFAB9C2B000-memory.dmp

          memory/1792-11-0x00007FFAB9690000-0x00007FFAB9860000-memory.dmp

          memory/1792-21-0x00007FFAAC420000-0x00007FFAAC53E000-memory.dmp

          memory/1792-24-0x00007FFABAE20000-0x00007FFABAE30000-memory.dmp

          memory/1792-26-0x00007FFAAB960000-0x00007FFAABC64000-memory.dmp

          memory/1792-27-0x00007FFAAB770000-0x00007FFAAB95D000-memory.dmp

          memory/1792-23-0x00007FFAB9670000-0x00007FFAB968A000-memory.dmp

          memory/1792-22-0x00007FFAABD20000-0x00007FFAAC41A000-memory.dmp

          memory/1792-20-0x00007FFAAC540000-0x00007FFAAC5F6000-memory.dmp

          memory/1792-19-0x00007FFABC040000-0x00007FFABC050000-memory.dmp

          memory/1792-18-0x00007FFABFF70000-0x00007FFABFF7E000-memory.dmp

          memory/1792-17-0x00007FFAB9390000-0x00007FFAB93B5000-memory.dmp

          memory/1792-16-0x00007FFAB9B20000-0x00007FFAB9B72000-memory.dmp

          memory/1792-15-0x00007FFAAC600000-0x00007FFAAC66A000-memory.dmp

          memory/1792-14-0x00007FFAAC670000-0x00007FFAAC7F2000-memory.dmp

          memory/1792-13-0x00007FFAB9B80000-0x00007FFAB9BDC000-memory.dmp

          memory/1792-12-0x00007FFAAC800000-0x00007FFAACA8F000-memory.dmp

          memory/1792-25-0x00007FFAABC70000-0x00007FFAABD16000-memory.dmp

          memory/1792-28-0x00007FFAAB640000-0x00007FFAAB76E000-memory.dmp

          memory/1792-34-0x00007FFAA9640000-0x00007FFAA967C000-memory.dmp

          memory/1792-33-0x00007FFAA9680000-0x00007FFAA9691000-memory.dmp

          memory/1792-48-0x00007FFAA8A80000-0x00007FFAA8AD9000-memory.dmp

          memory/1792-61-0x00007FFAA1CB0000-0x00007FFAA2409000-memory.dmp

          memory/1792-56-0x00007FFAA7390000-0x00007FFAA73DD000-memory.dmp

          memory/1792-68-0x00007FFAA5920000-0x00007FFAA5935000-memory.dmp

          memory/1792-67-0x00007FFAA5A60000-0x00007FFAA5A70000-memory.dmp

          memory/1792-66-0x00007FFAA5AB0000-0x00007FFAA5AC1000-memory.dmp

          memory/1792-65-0x00007FFAA5AD0000-0x00007FFAA5ADE000-memory.dmp

          memory/1792-64-0x00007FFAA5F70000-0x00007FFAA5F9B000-memory.dmp

          memory/1792-63-0x00007FFAA5FA0000-0x00007FFAA6035000-memory.dmp

          memory/1792-62-0x00007FFAA6040000-0x00007FFAA6073000-memory.dmp

          memory/1792-60-0x00007FFAA6890000-0x00007FFAA695B000-memory.dmp

          memory/1792-59-0x00007FFAA6960000-0x00007FFAA6A49000-memory.dmp

          memory/1792-58-0x00007FFAA6AF0000-0x00007FFAA6BAA000-memory.dmp

          memory/1792-57-0x00007FFAA7210000-0x00007FFAA738D000-memory.dmp

          memory/1792-55-0x00007FFAA74E0000-0x00007FFAA7537000-memory.dmp

          memory/1792-54-0x00007FFAA7690000-0x00007FFAA76BE000-memory.dmp

          memory/1792-53-0x00007FFAA8400000-0x00007FFAA87ED000-memory.dmp

          memory/1792-52-0x00007FFAA8900000-0x00007FFAA8979000-memory.dmp

          memory/1792-51-0x00007FFAA8980000-0x00007FFAA89CA000-memory.dmp

          memory/1792-50-0x00007FFAA87F0000-0x00007FFAA880B000-memory.dmp

          memory/1792-49-0x00007FFAA89D0000-0x00007FFAA8A7C000-memory.dmp

          memory/1792-47-0x00007FFAA8AE0000-0x00007FFAA8AED000-memory.dmp

          memory/1792-46-0x00007FFAA8AF0000-0x00007FFAA8AFD000-memory.dmp

          memory/1792-45-0x00007FFAA8E20000-0x00007FFAA8E2C000-memory.dmp

          memory/1792-44-0x00007FFAA8E30000-0x00007FFAA8E3C000-memory.dmp

          memory/1792-43-0x00007FFAA8E40000-0x00007FFAA8E55000-memory.dmp

          memory/1792-42-0x00007FFAACE60000-0x00007FFAACE6C000-memory.dmp

          memory/1792-41-0x00007FFAACE70000-0x00007FFAACE7C000-memory.dmp

          memory/1792-40-0x00007FFAA8E60000-0x00007FFAA8F96000-memory.dmp

          memory/1792-39-0x00007FFAB92C0000-0x00007FFAB92CC000-memory.dmp

          memory/1792-38-0x00007FFAB9AA0000-0x00007FFAB9AAC000-memory.dmp

          memory/1792-35-0x00007FFAA90F0000-0x00007FFAA9637000-memory.dmp

          memory/1792-37-0x00007FFAA8FA0000-0x00007FFAA9092000-memory.dmp

          memory/1792-36-0x00007FFAA90A0000-0x00007FFAA90E1000-memory.dmp

          memory/1792-32-0x00007FFAB25F0000-0x00007FFAB2607000-memory.dmp

          memory/1792-31-0x00007FFAB9AD0000-0x00007FFAB9ADC000-memory.dmp

          memory/1792-30-0x00007FFAB9DC0000-0x00007FFAB9DCD000-memory.dmp