Analysis
- user interaction
yes - max time kernel
3s - max time network
8s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
- submitted
26/10/2026, 15:59
General
- Target Loader_1.exe
- Size 22.1MB
- Sample261026-te38psxwex
- SHA256 77c62c38ca209f86f9d9f43f2c16ec28c9f6381fa1a4a916f418ada97749b2af
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 TTPs 2 IoCs
- Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Loader_1.exe"C:\Users\Admin\AppData\Local\Temp\Loader_1.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3080-0-0x0000000140418000-0x0000000141544000-memory.dmp
memory/3080-1-0x00007FFEB2770000-0x00007FFEB2772000-memory.dmp
memory/3080-8-0x00007FFEB27E0000-0x00007FFEB27E2000-memory.dmp
memory/3080-12-0x00007FFEB2820000-0x00007FFEB2822000-memory.dmp
memory/3080-11-0x00007FFEB2810000-0x00007FFEB2812000-memory.dmp
memory/3080-10-0x00007FFEB2800000-0x00007FFEB2802000-memory.dmp
memory/3080-9-0x00007FFEB27F0000-0x00007FFEB27F2000-memory.dmp
memory/3080-7-0x00007FFEB27D0000-0x00007FFEB27D2000-memory.dmp
memory/3080-3-0x00007FFEB2790000-0x00007FFEB2792000-memory.dmp
memory/3080-2-0x00007FFEB2780000-0x00007FFEB2782000-memory.dmp
memory/3080-6-0x00007FFEB27C0000-0x00007FFEB27C2000-memory.dmp
memory/3080-5-0x00007FFEB27B0000-0x00007FFEB27B2000-memory.dmp
memory/3080-4-0x00007FFEB27A0000-0x00007FFEB27A2000-memory.dmp
memory/3080-17-0x00007FFEB2870000-0x00007FFEB2872000-memory.dmp
memory/3080-16-0x00007FFEB2860000-0x00007FFEB2862000-memory.dmp
memory/3080-15-0x00007FFEB2850000-0x00007FFEB2852000-memory.dmp
memory/3080-14-0x00007FFEB2840000-0x00007FFEB2842000-memory.dmp
memory/3080-13-0x00007FFEB2830000-0x00007FFEB2832000-memory.dmp
memory/3080-21-0x00007FFEB28B0000-0x00007FFEB28B2000-memory.dmp
memory/3080-20-0x00007FFEB28A0000-0x00007FFEB28A2000-memory.dmp
memory/3080-19-0x00007FFEB2890000-0x00007FFEB2892000-memory.dmp
memory/3080-18-0x00007FFEB2880000-0x00007FFEB2882000-memory.dmp
memory/3080-22-0x0000000140000000-0x0000000142B5A000-memory.dmp
memory/3080-28-0x00000000021B0000-0x0000000002CC3000-memory.dmp
memory/3080-34-0x00000000021B0000-0x0000000002CC3000-memory.dmp