Analysis
- max time kernel
1s - max time network
17s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
22/10/2026, 22:45
General
- Target bin/audacious.exe
- Size 185KB
- Sample261022-2phzhsvtet
- SHA256 e7644bbbca0879a68f9c3c0aa8a379f6c7bfe82178321ae259943ae84ccb46b3
Malware Config
Signatures
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\bin\audacious.exe"C:\Users\Admin\AppData\Local\Temp\bin\audacious.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\bin\gdbus.exe"C:\Users\Admin\AppData\Local\Temp\bin\gdbus.exe" _win32_run_session_bus2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
org_gtk_gdbus_general
gdbus-nonce-file-CUCOX3
memory/5288-0-0x00007FFB4A680000-0x00007FFB4A86D000-memory.dmp
memory/5288-7-0x00007FFB47330000-0x00007FFB47A89000-memory.dmp
memory/5288-8-0x00007FF6F16C0000-0x00007FF6F16F5000-memory.dmp
memory/5288-12-0x00007FFB62CB0000-0x00007FFB62CC6000-memory.dmp
memory/5288-14-0x00007FFB56580000-0x00007FFB565DC000-memory.dmp
memory/5288-11-0x00007FFB55D80000-0x00007FFB55F02000-memory.dmp
memory/5288-19-0x00007FFB4B900000-0x00007FFB4BB8F000-memory.dmp
memory/5288-22-0x00007FFB4A870000-0x00007FFB4AF6A000-memory.dmp
memory/5288-34-0x00007FFB64FF0000-0x00007FFB6502C000-memory.dmp
memory/5288-53-0x00007FFB4DDF0000-0x00007FFB4DE5E000-memory.dmp
memory/5288-63-0x00007FFB4CBE0000-0x00007FFB4CC37000-memory.dmp
memory/5288-71-0x00007FFB4B7D0000-0x00007FFB4B7DE000-memory.dmp
memory/5288-70-0x00007FFB45610000-0x00007FFB456C8000-memory.dmp
memory/5288-69-0x00007FFB4B420000-0x00007FFB4B466000-memory.dmp
memory/5288-68-0x00007FFB4BB90000-0x00007FFB4BBF3000-memory.dmp
memory/5288-67-0x00007FFB4EBC0000-0x00007FFB4EC0D000-memory.dmp
memory/5288-66-0x00007FFB54030000-0x00007FFB5405E000-memory.dmp
memory/5288-65-0x00007FFB53B90000-0x00007FFB53BC9000-memory.dmp
memory/5288-62-0x00007FFB467C0000-0x00007FFB471EC000-memory.dmp
memory/5288-58-0x00007FFB471F0000-0x00007FFB47323000-memory.dmp
memory/5288-56-0x00007FFB47330000-0x00007FFB47A89000-memory.dmp
memory/5288-61-0x00007FFB54170000-0x00007FFB54187000-memory.dmp
memory/5288-60-0x00007FFB55C10000-0x00007FFB55C3E000-memory.dmp
memory/5288-59-0x00007FFB4E9D0000-0x00007FFB4EA2A000-memory.dmp
memory/5288-57-0x00007FFB4B610000-0x00007FFB4B6D9000-memory.dmp
memory/5288-55-0x00007FFB47A90000-0x00007FFB47E7D000-memory.dmp
memory/5288-54-0x00007FFB4B800000-0x00007FFB4B8FE000-memory.dmp
memory/5288-40-0x00007FFB4CC40000-0x00007FFB4CD76000-memory.dmp
memory/5288-36-0x00007FFB47E80000-0x00007FFB483C7000-memory.dmp
memory/5288-52-0x00007FFB53870000-0x00007FFB538BA000-memory.dmp
memory/5288-51-0x00007FFB4BC00000-0x00007FFB4BC79000-memory.dmp
memory/5288-50-0x00007FFB55C40000-0x00007FFB55C5B000-memory.dmp
memory/5288-49-0x00007FFB4BC80000-0x00007FFB4BD2C000-memory.dmp
memory/5288-48-0x00007FFB51C50000-0x00007FFB51CA9000-memory.dmp
memory/5288-47-0x00007FFB5BCB0000-0x00007FFB5BCBD000-memory.dmp
memory/5288-46-0x00007FFB5BD60000-0x00007FFB5BD6D000-memory.dmp
memory/5288-45-0x00007FFB5BD70000-0x00007FFB5BD7C000-memory.dmp
memory/5288-44-0x00007FFB5C0D0000-0x00007FFB5C0DC000-memory.dmp
memory/5288-43-0x00007FFB63790000-0x00007FFB637A5000-memory.dmp
memory/5288-42-0x00007FFB637B0000-0x00007FFB637BC000-memory.dmp
memory/5288-41-0x00007FFB64F40000-0x00007FFB64F4C000-memory.dmp
memory/5288-39-0x00007FFB64F80000-0x00007FFB64F8C000-memory.dmp
memory/5288-38-0x00007FFB64F90000-0x00007FFB64F9C000-memory.dmp
memory/5288-37-0x00007FFB64FA0000-0x00007FFB64FE1000-memory.dmp
memory/5288-35-0x00007FFB4DFF0000-0x00007FFB4E0E2000-memory.dmp
memory/5288-33-0x00007FFB65030000-0x00007FFB65041000-memory.dmp
memory/5288-32-0x00007FFB65050000-0x00007FFB65067000-memory.dmp
memory/5288-31-0x00007FFB65070000-0x00007FFB6507C000-memory.dmp
memory/5288-30-0x00007FFB65080000-0x00007FFB6508D000-memory.dmp
memory/5288-28-0x00007FFB4A370000-0x00007FFB4A674000-memory.dmp
memory/5288-27-0x00007FFB4DE60000-0x00007FFB4DF8E000-memory.dmp
memory/5288-26-0x00007FFB4A680000-0x00007FFB4A86D000-memory.dmp
memory/5288-25-0x00007FFB4E0F0000-0x00007FFB4E196000-memory.dmp
memory/5288-24-0x00007FFB5D350000-0x00007FFB5D360000-memory.dmp
memory/5288-23-0x00007FFB5D360000-0x00007FFB5D37A000-memory.dmp
memory/5288-18-0x00007FFB4EA30000-0x00007FFB4EB4E000-memory.dmp
memory/5288-21-0x00007FFB5D550000-0x00007FFB5D575000-memory.dmp
memory/5288-20-0x00007FFB5EB50000-0x00007FFB5EB60000-memory.dmp
memory/5288-17-0x00007FFB55C60000-0x00007FFB55D16000-memory.dmp
memory/5288-16-0x00007FFB61BA0000-0x00007FFB61BAE000-memory.dmp
memory/5288-15-0x00007FFB55D20000-0x00007FFB55D72000-memory.dmp
memory/5288-13-0x00007FFB565E0000-0x00007FFB5664A000-memory.dmp
memory/5288-10-0x00007FFB4E1A0000-0x00007FFB4E370000-memory.dmp
memory/5288-9-0x00007FFB5EB60000-0x00007FFB5EB8B000-memory.dmp