Analysis
- user interaction
yes - max time kernel
26s - max time network
26s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
24/10/2026, 03:22
General
- Target 20261023-0939_a4bc97aca2c7d2f93bb9c015e70d3a18.exe
- Size 24.3MB
- Sample261024-dwznvasse1
- SHA256 624af05cb391eb2e221420c492c61f746a0baee0eb6cc2cdba01d20ef678615c
Score
8/10
Malware Config
Signatures
- Drops file in Drivers directory 1 IoCs
- Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\20261023-0939_a4bc97aca2c7d2f93bb9c015e70d3a18.exe"C:\Users\Admin\AppData\Local\Temp\20261023-0939_a4bc97aca2c7d2f93bb9c015e70d3a18.exe"1⤵
- Drops file in Drivers directory
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4980-0-0x00007FFF33730000-0x00007FFF33732000-memory.dmp
memory/4980-2-0x00007FFF33750000-0x00007FFF33752000-memory.dmp
memory/4980-3-0x00007FF7E203C000-0x00007FF7E335F000-memory.dmp
memory/4980-4-0x00007FFF325B0000-0x00007FFF325B2000-memory.dmp
memory/4980-5-0x00007FFF325C0000-0x00007FFF325C2000-memory.dmp
memory/4980-1-0x00007FFF33740000-0x00007FFF33742000-memory.dmp
memory/4980-6-0x00007FFF310A0000-0x00007FFF310A2000-memory.dmp
memory/4980-7-0x00007FFF310B0000-0x00007FFF310B2000-memory.dmp
memory/4980-8-0x00007FF7E2020000-0x00007FF7E4BB7000-memory.dmp
memory/4980-12-0x00007FF7E2020000-0x00007FF7E4BB7000-memory.dmp
memory/4980-13-0x00007FF7E2020000-0x00007FF7E4BB7000-memory.dmp
memory/4980-14-0x00007FF7E203C000-0x00007FF7E335F000-memory.dmp