Analysis
- user interaction
yes - max time kernel
150s - max time network
131s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
24/10/2026, 18:12
General
- Target palacehub.exe
- Size 93.2MB
- Sample261024-wtf3tsbv71
- SHA256 1dd4e02aedbe4670249dc5fdd3d0609c6dbc5377ef97972f959efa4ee5193d73
Malware Config
Signatures
- Loads dropped DLL 1 IoCs
- Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
Processes
-
C:\Users\Admin\AppData\Local\Temp\palacehub.exe"C:\Users\Admin\AppData\Local\Temp\palacehub.exe"1⤵
- Loads dropped DLL
- Reads the TCP/IP host and domain name from the registry
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
2026-10-24T18-15-04-220Z-b2z3.checkpoint.json.4224.bc581731-60e1-4db8-9d43-2e218750de5f.tmp
2026-10-24T18-15-04-220Z-b2z3.jsonl
.bun-1534026329-ec0fa178f1aa34c.dll
memory/4224-2-0x00000291F8001000-0x00000291F8002000-memory.dmp
memory/4224-1-0x00000291F8002000-0x00000291F8003000-memory.dmp
memory/4224-3-0x00000291F8003000-0x00000291F8004000-memory.dmp
memory/4224-4-0x00000291F8004000-0x00000291F8005000-memory.dmp
memory/4224-6-0x0000029237FFF000-0x0000029238000000-memory.dmp
memory/4224-5-0x00000291F8005000-0x00000291F8006000-memory.dmp
memory/4224-7-0x00000291F8006000-0x00000291F8007000-memory.dmp
memory/4224-10-0x00000291F8013000-0x00000291F8029000-memory.dmp
memory/4224-9-0x00000291F8011000-0x00000291F8012000-memory.dmp
memory/4224-13-0x00000291F8029000-0x00000291F802A000-memory.dmp
memory/4224-8-0x00000291F800C000-0x00000291F800F000-memory.dmp
memory/4224-15-0x00000291F8002000-0x00000291F8003000-memory.dmp
memory/4224-14-0x00000291F8007000-0x00000291F8008000-memory.dmp
memory/4224-18-0x00000291F802A000-0x00000291F802B000-memory.dmp
memory/4224-20-0x00000291F8059000-0x00000291F805A000-memory.dmp
memory/4224-19-0x00000291F8003000-0x00000291F8004000-memory.dmp
memory/4224-25-0x00000291F802E000-0x00000291F802F000-memory.dmp
memory/4224-29-0x00000291F8030000-0x00000291F8031000-memory.dmp
memory/4224-28-0x00000291F802F000-0x00000291F8030000-memory.dmp
memory/4224-27-0x00000291F8039000-0x00000291F803A000-memory.dmp
memory/4224-26-0x00000291F8006000-0x00000291F8007000-memory.dmp
memory/4224-24-0x00000291F8005000-0x00000291F8006000-memory.dmp
memory/4224-23-0x00000291F802D000-0x00000291F802E000-memory.dmp
memory/4224-22-0x00000291F805A000-0x00000291F805B000-memory.dmp
memory/4224-21-0x00000291F8004000-0x00000291F8005000-memory.dmp
memory/4224-37-0x00000291F803B000-0x00000291F803C000-memory.dmp
memory/4224-38-0x00000291F8033000-0x00000291F8034000-memory.dmp
memory/4224-41-0x00000291F8040000-0x00000291F8041000-memory.dmp
memory/4224-40-0x00000291F8037000-0x00000291F8038000-memory.dmp
memory/4224-39-0x00000291F8038000-0x00000291F8039000-memory.dmp
memory/4224-36-0x00000291F803F000-0x00000291F8040000-memory.dmp
memory/4224-35-0x00000291F803A000-0x00000291F803B000-memory.dmp
memory/4224-34-0x00000291F802B000-0x00000291F802C000-memory.dmp
memory/4224-33-0x00000291F803E000-0x00000291F803F000-memory.dmp
memory/4224-32-0x00000291F803C000-0x00000291F803D000-memory.dmp
memory/4224-31-0x00000291F803D000-0x00000291F803E000-memory.dmp
memory/4224-30-0x00000291F8012000-0x00000291F8013000-memory.dmp
memory/4224-46-0x00000291F8065000-0x00000291F8066000-memory.dmp
memory/4224-45-0x00000291F8064000-0x00000291F8065000-memory.dmp
memory/4224-51-0x00000291F805B000-0x00000291F805E000-memory.dmp
memory/4224-50-0x00000291F805F000-0x00000291F8060000-memory.dmp
memory/4224-49-0x00000291F805E000-0x00000291F805F000-memory.dmp
memory/4224-54-0x00000291F806D000-0x00000291F806E000-memory.dmp
memory/4224-53-0x00000291F806C000-0x00000291F806D000-memory.dmp
memory/4224-52-0x00000291F806E000-0x00000291F806F000-memory.dmp
memory/4224-48-0x00000291F8066000-0x00000291F8067000-memory.dmp
memory/4224-47-0x00000291F8060000-0x00000291F8061000-memory.dmp
memory/4224-44-0x00000291F8063000-0x00000291F8064000-memory.dmp
memory/4224-43-0x00000291F8062000-0x00000291F8063000-memory.dmp
memory/4224-42-0x00000291F8061000-0x00000291F8062000-memory.dmp
memory/4224-62-0x00000291F8063000-0x00000291F8064000-memory.dmp
memory/4224-61-0x00000291F8010000-0x00000291F8011000-memory.dmp
memory/4224-66-0x00000291F8064000-0x00000291F8065000-memory.dmp
memory/4224-65-0x00000291F8081000-0x00000291F8083000-memory.dmp
memory/4224-64-0x00000291F8084000-0x00000291F8085000-memory.dmp
memory/4224-63-0x00000291F8083000-0x00000291F8084000-memory.dmp
memory/4224-55-0x00000291F806F000-0x00000291F8070000-memory.dmp
memory/4224-60-0x00000291F8069000-0x00000291F806B000-memory.dmp
memory/4224-59-0x00000291F806B000-0x00000291F806C000-memory.dmp
memory/4224-58-0x00000291F800F000-0x00000291F8010000-memory.dmp
memory/4224-57-0x00000291F8067000-0x00000291F8068000-memory.dmp
memory/4224-56-0x00000291F8068000-0x00000291F8069000-memory.dmp
memory/4224-67-0x00000291F8065000-0x00000291F8066000-memory.dmp
memory/4224-68-0x00000291F8085000-0x00000291F8086000-memory.dmp
memory/4224-69-0x00000291F8078000-0x00000291F807E000-memory.dmp
memory/4224-75-0x00000291F8066000-0x00000291F8067000-memory.dmp
memory/4224-76-0x00000291F8073000-0x00000291F8074000-memory.dmp
memory/4224-74-0x00000291F8080000-0x00000291F8081000-memory.dmp
memory/4224-79-0x00000291F8086000-0x00000291F8087000-memory.dmp
memory/4224-78-0x00000291F806D000-0x00000291F806E000-memory.dmp
memory/4224-77-0x00000291F806E000-0x00000291F806F000-memory.dmp
memory/4224-73-0x00000291F8074000-0x00000291F8076000-memory.dmp
memory/4224-72-0x00000291F8076000-0x00000291F8078000-memory.dmp
memory/4224-71-0x00000291F8070000-0x00000291F8073000-memory.dmp
memory/4224-70-0x00000291F807E000-0x00000291F807F000-memory.dmp
memory/4224-84-0x00000291F806F000-0x00000291F8070000-memory.dmp
memory/4224-85-0x00000291F808B000-0x00000291F808D000-memory.dmp
memory/4224-90-0x00000291F807F000-0x00000291F8080000-memory.dmp
memory/4224-96-0x00000291F8080000-0x00000291F8081000-memory.dmp
memory/4224-98-0x00000291F8093000-0x00000291F8094000-memory.dmp
memory/4224-100-0x00000291F8094000-0x00000291F8095000-memory.dmp
memory/4224-99-0x00000291F8086000-0x00000291F8087000-memory.dmp
memory/4224-97-0x00000291F8092000-0x00000291F8093000-memory.dmp
memory/4224-95-0x00000291F8078000-0x00000291F807E000-memory.dmp
memory/4224-94-0x00000291F8091000-0x00000291F8092000-memory.dmp
memory/4224-93-0x00000291F8090000-0x00000291F8091000-memory.dmp
memory/4224-92-0x00000291F808F000-0x00000291F8090000-memory.dmp
memory/4224-91-0x00000291F8085000-0x00000291F8086000-memory.dmp
memory/4224-89-0x00000291F808E000-0x00000291F808F000-memory.dmp
memory/4224-88-0x00000291F808D000-0x00000291F808E000-memory.dmp
memory/4224-87-0x00000291F8081000-0x00000291F8083000-memory.dmp
memory/4224-86-0x00000291F8084000-0x00000291F8085000-memory.dmp
memory/4224-83-0x00000291F808A000-0x00000291F808B000-memory.dmp
memory/4224-81-0x00000291F8089000-0x00000291F808A000-memory.dmp
memory/4224-80-0x00000291F8088000-0x00000291F8089000-memory.dmp
memory/4224-82-0x00000291F8087000-0x00000291F8088000-memory.dmp