Analysis
- user interaction
yes - max time kernel
19s - max time network
21s - platform
windows11-21h2_x64 - resource
win11-20260911-en - resource tags
- submitted
24/10/2026, 16:48
General
- Target newuiv3.exe
- Size 36KB
- Sample261024-vbcf9avzct
- SHA256 8c17800393e3bc9478a17de76616bd7a9b77ee1a4b2c30ea0eb6ef647de2ad9a
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\newuiv3.exe"C:\Users\Admin\AppData\Local\Temp\newuiv3.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4200-3-0x0000000001420000-0x0000000001421000-memory.dmp
memory/4200-6-0x0000000003180000-0x0000000003CE4000-memory.dmp
memory/4200-2-0x0000000001440000-0x0000000001441000-memory.dmp
memory/4200-1-0x0000000003180000-0x0000000003CE4000-memory.dmp
memory/4200-7-0x0000000003180000-0x0000000003CE4000-memory.dmp
memory/4200-11-0x0000000003180000-0x0000000003CE4000-memory.dmp
memory/4200-12-0x0000000003180000-0x0000000003CE4000-memory.dmp
memory/4200-10-0x0000000003180000-0x0000000003CE4000-memory.dmp
memory/4200-14-0x0000000003180000-0x0000000003CE4000-memory.dmp
memory/4200-15-0x0000000003180000-0x0000000003CE4000-memory.dmp
memory/4200-17-0x0000000003180000-0x0000000003CE4000-memory.dmp
memory/4200-18-0x0000000003180000-0x0000000003CE4000-memory.dmp
memory/4200-20-0x0000000003180000-0x0000000003CE4000-memory.dmp
memory/4200-21-0x0000000003180000-0x0000000003CE4000-memory.dmp
memory/4200-16-0x0000000003180000-0x0000000003CE4000-memory.dmp
memory/4200-13-0x0000000003180000-0x0000000003CE4000-memory.dmp
memory/4200-9-0x0000000003180000-0x0000000003CE4000-memory.dmp
memory/4200-5-0x0000000003180000-0x0000000003CE4000-memory.dmp
memory/4200-4-0x0000000003180000-0x0000000003CE4000-memory.dmp