Resubmissions
27/10/2026, 01:20
261027-bp25aaxv9n1027/10/2026, 01:03
261027-bentxazzcs1015/09/2026, 06:58
260915-hrlcwashqf10Analysis
- max time kernel
170s - max time network
116s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-es - resource tags
- submitted
27/10/2026, 01:03
General
- Target 5e1f61b9c1c27cad3b7a81c804ac7b86.exe
- Size 691KB
- Sample261027-bentxazzcs
- SHA256 180e93a091f8ab584a827da92c560c78f468c45f2539f73ab2deb308fb837b38
Malware Config
Signatures
- Suspicious use of SetThreadContext 1 IoCs
- Suspicious behavior: RenamesItself 1 IoCs
- Suspicious use of WriteProcessMemory 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5e1f61b9c1c27cad3b7a81c804ac7b86.exe"C:\Users\Admin\AppData\Local\Temp\5e1f61b9c1c27cad3b7a81c804ac7b86.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\defrag.exeC:\Windows\system32\defrag.exe2⤵
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4124-1-0x00000203C0030000-0x00000203C0031000-memory.dmp
memory/4124-0-0x00000203C0020000-0x00000203C0021000-memory.dmp
memory/4124-2-0x00000203C0040000-0x00000203C0041000-memory.dmp
memory/4124-4-0x00000203C0060000-0x00000203C0061000-memory.dmp
memory/4124-3-0x00000203C0050000-0x00000203C0051000-memory.dmp
memory/4124-5-0x00000203C02E0000-0x00000203C02E1000-memory.dmp
memory/4124-6-0x00000203C0070000-0x00000203C0071000-memory.dmp
memory/4124-7-0x00000203C0080000-0x00000203C0081000-memory.dmp
memory/4124-9-0x00000203C00A0000-0x00000203C00A1000-memory.dmp
memory/4124-8-0x00000203C0090000-0x00000203C0091000-memory.dmp
memory/4124-16-0x00000203C0110000-0x00000203C0111000-memory.dmp
memory/4124-15-0x00000203C0100000-0x00000203C0101000-memory.dmp
memory/4124-13-0x00000203C00F0000-0x00000203C00F1000-memory.dmp
memory/4124-12-0x00000203C00D0000-0x00000203C00D1000-memory.dmp
memory/4124-11-0x00000203C00C0000-0x00000203C00C1000-memory.dmp
memory/4124-10-0x00000203C00B0000-0x00000203C00B1000-memory.dmp
memory/4124-18-0x00000203C0130000-0x00000203C0131000-memory.dmp
memory/4124-17-0x00000203C0120000-0x00000203C0121000-memory.dmp
memory/4124-21-0x00000203C0160000-0x00000203C0161000-memory.dmp
memory/4124-20-0x00000203C0150000-0x00000203C0151000-memory.dmp
memory/4124-22-0x00000203C0170000-0x00000203C0171000-memory.dmp
memory/4124-23-0x00000203C0180000-0x00000203C0181000-memory.dmp
memory/4124-19-0x00000203C0140000-0x00000203C0141000-memory.dmp
memory/4124-24-0x00007FF7BB390000-0x00007FF7BB94C000-memory.dmp