Analysis
- max time kernel
150s - max time network
131s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-fr - resource tags
- submitted
24/10/2026, 18:24
General
- Target palacehub.exe
- Size 93.2MB
- Sample261024-w175wsbw31
- SHA256 1dd4e02aedbe4670249dc5fdd3d0609c6dbc5377ef97972f959efa4ee5193d73
Malware Config
Signatures
- Loads dropped DLL 1 IoCs
- Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
Processes
-
C:\Users\Admin\AppData\Local\Temp\palacehub.exe"C:\Users\Admin\AppData\Local\Temp\palacehub.exe"1⤵
- Loads dropped DLL
- Reads the TCP/IP host and domain name from the registry
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
.bun-1534026329-ec0fa178f1aa34c.dll
memory/5180-1-0x0000024980002000-0x0000024980003000-memory.dmp
memory/5180-2-0x0000024980001000-0x0000024980002000-memory.dmp
memory/5180-3-0x0000024980003000-0x0000024980004000-memory.dmp
memory/5180-4-0x0000024980004000-0x0000024980005000-memory.dmp
memory/5180-5-0x00000249BFFFF000-0x00000249C0000000-memory.dmp
memory/5180-6-0x0000024980005000-0x0000024980006000-memory.dmp
memory/5180-10-0x0000024980008000-0x0000024980009000-memory.dmp
memory/5180-12-0x000002498000C000-0x000002498000F000-memory.dmp
memory/5180-17-0x0000024980012000-0x0000024980013000-memory.dmp
memory/5180-16-0x0000024980010000-0x0000024980011000-memory.dmp
memory/5180-15-0x000002498000F000-0x0000024980010000-memory.dmp
memory/5180-14-0x0000024980011000-0x0000024980012000-memory.dmp
memory/5180-13-0x0000024980002000-0x0000024980003000-memory.dmp
memory/5180-11-0x000002498000A000-0x000002498000C000-memory.dmp
memory/5180-9-0x0000024980009000-0x000002498000A000-memory.dmp
memory/5180-7-0x0000024980006000-0x0000024980007000-memory.dmp
memory/5180-24-0x0000024980016000-0x0000024980017000-memory.dmp
memory/5180-18-0x0000024980004000-0x0000024980005000-memory.dmp
memory/5180-23-0x0000024980015000-0x0000024980016000-memory.dmp
memory/5180-22-0x0000024980014000-0x0000024980015000-memory.dmp
memory/5180-21-0x0000024980013000-0x0000024980014000-memory.dmp
memory/5180-8-0x0000024980007000-0x0000024980008000-memory.dmp
memory/5180-27-0x000002498002D000-0x000002498002E000-memory.dmp
memory/5180-31-0x0000024980009000-0x000002498000A000-memory.dmp
memory/5180-32-0x000002498005F000-0x0000024980060000-memory.dmp
memory/5180-30-0x000002498005E000-0x000002498005F000-memory.dmp
memory/5180-29-0x0000024980030000-0x0000024980031000-memory.dmp
memory/5180-28-0x0000024980005000-0x0000024980006000-memory.dmp
memory/5180-34-0x0000024980032000-0x0000024980033000-memory.dmp
memory/5180-33-0x0000024980060000-0x0000024980061000-memory.dmp
memory/5180-41-0x0000024980035000-0x0000024980036000-memory.dmp
memory/5180-42-0x0000024980016000-0x0000024980017000-memory.dmp
memory/5180-43-0x000002498003F000-0x0000024980040000-memory.dmp
memory/5180-40-0x0000024980034000-0x0000024980035000-memory.dmp
memory/5180-51-0x0000024980039000-0x000002498003A000-memory.dmp
memory/5180-56-0x0000024980036000-0x0000024980037000-memory.dmp
memory/5180-55-0x000002498003D000-0x000002498003E000-memory.dmp
memory/5180-54-0x0000024980066000-0x0000024980067000-memory.dmp
memory/5180-61-0x000002498006B000-0x000002498006C000-memory.dmp
memory/5180-60-0x000002498006A000-0x000002498006B000-memory.dmp
memory/5180-59-0x0000024980069000-0x000002498006A000-memory.dmp
memory/5180-58-0x0000024980068000-0x0000024980069000-memory.dmp
memory/5180-57-0x000002498005F000-0x0000024980060000-memory.dmp
memory/5180-53-0x0000024980067000-0x0000024980068000-memory.dmp
memory/5180-52-0x0000024980030000-0x0000024980031000-memory.dmp
memory/5180-50-0x0000024980041000-0x0000024980042000-memory.dmp
memory/5180-49-0x0000024980045000-0x0000024980046000-memory.dmp
memory/5180-48-0x0000024980040000-0x0000024980041000-memory.dmp
memory/5180-47-0x0000024980044000-0x0000024980045000-memory.dmp
memory/5180-46-0x0000024980042000-0x0000024980043000-memory.dmp
memory/5180-45-0x0000024980063000-0x0000024980064000-memory.dmp
memory/5180-44-0x000002498002F000-0x0000024980030000-memory.dmp
memory/5180-39-0x000002498003E000-0x000002498003F000-memory.dmp
memory/5180-38-0x0000024980033000-0x0000024980034000-memory.dmp
memory/5180-37-0x0000024980012000-0x0000024980013000-memory.dmp
memory/5180-36-0x000002498000F000-0x0000024980010000-memory.dmp
memory/5180-63-0x0000024980065000-0x0000024980066000-memory.dmp
memory/5180-62-0x0000024980064000-0x0000024980065000-memory.dmp
memory/5180-35-0x0000024980011000-0x0000024980012000-memory.dmp
memory/5180-70-0x0000024980072000-0x0000024980074000-memory.dmp
memory/5180-69-0x0000024980071000-0x0000024980072000-memory.dmp
memory/5180-68-0x0000024980070000-0x0000024980071000-memory.dmp
memory/5180-67-0x000002498006F000-0x0000024980070000-memory.dmp
memory/5180-66-0x000002498006C000-0x000002498006D000-memory.dmp
memory/5180-65-0x000002498006D000-0x000002498006E000-memory.dmp
memory/5180-64-0x000002498006E000-0x000002498006F000-memory.dmp
memory/5180-73-0x0000024980075000-0x0000024980077000-memory.dmp
memory/5180-72-0x0000024980074000-0x0000024980075000-memory.dmp
memory/5180-71-0x0000024980067000-0x0000024980068000-memory.dmp
memory/5180-80-0x000002498007D000-0x000002498007F000-memory.dmp
memory/5180-79-0x000002498006A000-0x000002498006B000-memory.dmp
memory/5180-78-0x000002498007C000-0x000002498007D000-memory.dmp
memory/5180-77-0x000002498007B000-0x000002498007C000-memory.dmp
memory/5180-76-0x0000024980078000-0x000002498007B000-memory.dmp
memory/5180-75-0x0000024980077000-0x0000024980078000-memory.dmp
memory/5180-74-0x0000024980069000-0x000002498006A000-memory.dmp
memory/5180-82-0x000002498008C000-0x000002498008D000-memory.dmp
memory/5180-81-0x000002498006B000-0x000002498006C000-memory.dmp
memory/5180-83-0x0000024980082000-0x0000024980088000-memory.dmp
memory/5180-92-0x0000024980072000-0x0000024980074000-memory.dmp
memory/5180-91-0x0000024980088000-0x0000024980089000-memory.dmp
memory/5180-90-0x0000024980089000-0x000002498008A000-memory.dmp
memory/5180-89-0x000002498008A000-0x000002498008C000-memory.dmp
memory/5180-88-0x000002498007F000-0x0000024980082000-memory.dmp
memory/5180-87-0x0000024980090000-0x0000024980092000-memory.dmp
memory/5180-86-0x000002498008F000-0x0000024980090000-memory.dmp
memory/5180-85-0x000002498008D000-0x000002498008E000-memory.dmp
memory/5180-84-0x000002498008E000-0x000002498008F000-memory.dmp
memory/5180-94-0x0000024980093000-0x0000024980094000-memory.dmp
memory/5180-95-0x0000024980074000-0x0000024980075000-memory.dmp
memory/5180-100-0x0000024980097000-0x0000024980098000-memory.dmp
memory/5180-99-0x0000024980094000-0x0000024980095000-memory.dmp
memory/5180-98-0x0000024980096000-0x0000024980097000-memory.dmp
memory/5180-97-0x0000024980095000-0x0000024980096000-memory.dmp
memory/5180-96-0x0000024980075000-0x0000024980077000-memory.dmp
memory/5180-93-0x0000024980092000-0x0000024980093000-memory.dmp