Analysis
- max time kernel
67s - max time network
126s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
22/10/2026, 04:25
General
- Target file.exe
- Size 24.0MB
- Sample261022-e2bpmshy5w
- SHA256 9a657127746347ffa09592d0c03400ed7ee24c4cbc89bc447a4900b96cdff184
Score
7/10
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\file.exe"C:\Users\Admin\AppData\Local\Temp\file.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\ProgramData\Google\Client State\9nfo1h66\GoogleUpdateScheduler.exe"C:\ProgramData\Google\Client State\9nfo1h66\GoogleUpdateScheduler.exe" /install22⤵
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
GoogleUpdateScheduler.exe
memory/4124-2-0x0000000140001000-0x00000001400E6000-memory.dmp
memory/4124-0-0x0000000140000000-0x000000014149E000-memory.dmp
memory/4124-1-0x0000000140000000-0x000000014149E000-memory.dmp
memory/4124-3-0x00007FF69A180000-0x00007FF69A534000-memory.dmp
memory/4324-16-0x00007FF7B0130000-0x00007FF7B04E4000-memory.dmp