Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
23/10/2026, 15:32
General
- Target 20261023-0939_a4bc97aca2c7d2f93bb9c015e70d3a18.exe
- Size 24.3MB
- Sample261023-sylbkact8x
- SHA256 624af05cb391eb2e221420c492c61f746a0baee0eb6cc2cdba01d20ef678615c
Malware Config
Signatures
- Drops file in Drivers directory 1 IoCs
- Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\20261023-0939_a4bc97aca2c7d2f93bb9c015e70d3a18.exe"C:\Users\Admin\AppData\Local\Temp\20261023-0939_a4bc97aca2c7d2f93bb9c015e70d3a18.exe"1⤵
- Drops file in Drivers directory
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3032-0-0x00007FF876050000-0x00007FF876052000-memory.dmp
memory/3032-1-0x00007FF876060000-0x00007FF876062000-memory.dmp
memory/3032-3-0x00007FF60D3DC000-0x00007FF60E6FF000-memory.dmp
memory/3032-4-0x00007FF874420000-0x00007FF874422000-memory.dmp
memory/3032-2-0x00007FF876070000-0x00007FF876072000-memory.dmp
memory/3032-5-0x00007FF874430000-0x00007FF874432000-memory.dmp
memory/3032-6-0x00007FF873C60000-0x00007FF873C62000-memory.dmp
memory/3032-7-0x00007FF873C70000-0x00007FF873C72000-memory.dmp
memory/3032-12-0x00007FF60D3C0000-0x00007FF60FF57000-memory.dmp
memory/3032-13-0x00000176DD040000-0x00000176DD0E9000-memory.dmp
memory/3032-14-0x00007FF60D3C0000-0x00007FF60FF57000-memory.dmp
memory/3032-15-0x00007FF60D3C0000-0x00007FF60FF57000-memory.dmp
memory/3032-17-0x00007FF60D3DC000-0x00007FF60E6FF000-memory.dmp