Analysis
- max time kernel
149s - max time network
152s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
23/10/2026, 19:08
General
- Target CURRENT SENSOR.exe
- Size 1.6MB
- Sample261023-xtcwvatz8p
- SHA256 2fbd048a7cc7f8d4ce3493f3431f6fc48a3101509a859374c30c5c1b454cfa74
Malware Config
Signatures
- .NET Reactor proctector 64 IoCs
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious behavior: EnumeratesProcesses 3 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\CURRENT SENSOR.exe"C:\Users\Admin\AppData\Local\Temp\CURRENT SENSOR.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Users\Admin\AppData\Local\Temp\CURRENT SENSOR.exe"C:\Users\Admin\AppData\Local\Temp\CURRENT SENSOR.exe"2⤵
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1984-0-0x0000000074292000-0x0000000074293000-memory.dmp
memory/1984-1-0x0000000000D30000-0x0000000000EC8000-memory.dmp
memory/1984-2-0x0000000006070000-0x000000000662A000-memory.dmp
memory/1984-3-0x00000000059C0000-0x0000000005A52000-memory.dmp
memory/1984-4-0x0000000005B50000-0x0000000005BEC000-memory.dmp
memory/1984-5-0x0000000005A80000-0x0000000005A8A000-memory.dmp
memory/1984-6-0x0000000074280000-0x0000000074A3C000-memory.dmp
memory/1984-7-0x0000000009570000-0x00000000095E4000-memory.dmp
memory/1984-11-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-31-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-33-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-45-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-59-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-83-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-103-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-133-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-131-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-129-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-127-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-125-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-123-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-121-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-119-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-117-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-703-0x00000000098B0000-0x0000000009C0B000-memory.dmp
memory/1984-704-0x00000000097D0000-0x00000000097F2000-memory.dmp
memory/1984-702-0x0000000074280000-0x0000000074A3C000-memory.dmp
memory/1984-115-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-113-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-111-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-705-0x0000000009800000-0x0000000009828000-memory.dmp
memory/1984-109-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-107-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-105-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-101-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-99-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-97-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-95-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-93-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-91-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-89-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-87-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-85-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-81-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-79-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-77-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-75-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-73-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-71-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-69-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-67-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-65-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-63-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-61-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-57-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-55-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-53-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-51-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-49-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-47-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-43-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-41-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-39-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-37-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-35-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-30-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-27-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-23-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-21-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-19-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-15-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-25-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-17-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-9-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-8-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-13-0x0000000009570000-0x00000000095F4000-memory.dmp
memory/1984-706-0x0000000074280000-0x0000000074A3C000-memory.dmp
memory/1984-707-0x0000000074292000-0x0000000074293000-memory.dmp
memory/1984-708-0x0000000074280000-0x0000000074A3C000-memory.dmp
memory/1984-709-0x0000000009C20000-0x0000000009C4A000-memory.dmp
memory/1984-842-0x0000000074280000-0x0000000074A3C000-memory.dmp
memory/1984-843-0x0000000074280000-0x0000000074A3C000-memory.dmp
memory/1984-846-0x0000000074280000-0x0000000074A3C000-memory.dmp