Resubmissions
27/10/2026, 01:20
261027-bp25aaxv9n1027/10/2026, 01:03
261027-bentxazzcs1015/09/2026, 06:58
260915-hrlcwashqf10Analysis
- max time kernel
376s - max time network
376s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-es - resource tags
- submitted
27/10/2026, 01:03
General
- Target 8f718979876dd1050ce4f729d69e0072.exe
- Size 698KB
- Sample261027-bentxazzcs
- SHA256 3194ab5e2a174e9f859e8fb6d2a33ac7aa15dc1af0da512910cf869fb15f1ebd
Malware Config
Signatures
- Suspicious use of SetThreadContext 1 IoCs
- Suspicious behavior: RenamesItself 1 IoCs
- Suspicious use of WriteProcessMemory 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\8f718979876dd1050ce4f729d69e0072.exe"C:\Users\Admin\AppData\Local\Temp\8f718979876dd1050ce4f729d69e0072.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\defrag.exeC:\Windows\system32\defrag.exe2⤵
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1436-4-0x000002A2BBC70000-0x000002A2BBC71000-memory.dmp
memory/1436-2-0x000002A2BBC50000-0x000002A2BBC51000-memory.dmp
memory/1436-1-0x000002A2BBC40000-0x000002A2BBC41000-memory.dmp
memory/1436-0-0x000002A2BBC30000-0x000002A2BBC31000-memory.dmp
memory/1436-3-0x000002A2BBC60000-0x000002A2BBC61000-memory.dmp
memory/1436-6-0x000002A2BBC80000-0x000002A2BBC81000-memory.dmp
memory/1436-5-0x000002A2BBEF0000-0x000002A2BBEF1000-memory.dmp
memory/1436-9-0x000002A2BBCB0000-0x000002A2BBCB1000-memory.dmp
memory/1436-8-0x000002A2BBCA0000-0x000002A2BBCA1000-memory.dmp
memory/1436-7-0x000002A2BBC90000-0x000002A2BBC91000-memory.dmp
memory/1436-10-0x000002A2BBCC0000-0x000002A2BBCC1000-memory.dmp
memory/1436-13-0x000002A2BBD00000-0x000002A2BBD01000-memory.dmp
memory/1436-12-0x000002A2BBCE0000-0x000002A2BBCE1000-memory.dmp
memory/1436-16-0x000002A2BBD20000-0x000002A2BBD21000-memory.dmp
memory/1436-15-0x000002A2BBD10000-0x000002A2BBD11000-memory.dmp
memory/1436-11-0x000002A2BBCD0000-0x000002A2BBCD1000-memory.dmp
memory/1436-18-0x000002A2BBD40000-0x000002A2BBD41000-memory.dmp
memory/1436-23-0x000002A2BBD90000-0x000002A2BBD91000-memory.dmp
memory/1436-22-0x000002A2BBD80000-0x000002A2BBD81000-memory.dmp
memory/1436-19-0x000002A2BBD50000-0x000002A2BBD51000-memory.dmp
memory/1436-17-0x000002A2BBD30000-0x000002A2BBD31000-memory.dmp
memory/1436-21-0x000002A2BBD70000-0x000002A2BBD71000-memory.dmp
memory/1436-20-0x000002A2BBD60000-0x000002A2BBD61000-memory.dmp
memory/1436-24-0x00007FF6B2FC0000-0x00007FF6B357E000-memory.dmp