Resubmissions
27/10/2026, 01:20
261027-bp25aaxv9n1027/10/2026, 01:03
261027-bentxazzcs1015/09/2026, 06:58
260915-hrlcwashqf10Analysis
- max time kernel
170s - max time network
114s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-es - resource tags
- submitted
27/10/2026, 01:03
General
- Target 95daa771a28eaed76eb01e1e8f403f7c.exe
- Size 693KB
- Sample261027-bentxazzcs
- SHA256 7ea5afbc166c4e23498aa9747be81ceaf8dad90b8daa07a6e4644dc7c2277b82
Malware Config
Signatures
- Suspicious use of SetThreadContext 1 IoCs
- Suspicious behavior: RenamesItself 1 IoCs
- Suspicious use of WriteProcessMemory 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\95daa771a28eaed76eb01e1e8f403f7c.exe"C:\Users\Admin\AppData\Local\Temp\95daa771a28eaed76eb01e1e8f403f7c.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\defrag.exeC:\Windows\system32\defrag.exe2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1092-0-0x0000023B646D0000-0x0000023B646D1000-memory.dmp
memory/1092-2-0x0000023B646F0000-0x0000023B646F1000-memory.dmp
memory/1092-1-0x0000023B646E0000-0x0000023B646E1000-memory.dmp
memory/1092-4-0x0000023B64710000-0x0000023B64711000-memory.dmp
memory/1092-3-0x0000023B64700000-0x0000023B64701000-memory.dmp
memory/1092-5-0x0000023B64990000-0x0000023B64991000-memory.dmp
memory/1092-9-0x0000023B64750000-0x0000023B64751000-memory.dmp
memory/1092-11-0x0000023B64770000-0x0000023B64771000-memory.dmp
memory/1092-7-0x0000023B64730000-0x0000023B64731000-memory.dmp
memory/1092-13-0x0000023B647A0000-0x0000023B647A1000-memory.dmp
memory/1092-16-0x0000023B647C0000-0x0000023B647C1000-memory.dmp
memory/1092-12-0x0000023B64780000-0x0000023B64781000-memory.dmp
memory/1092-15-0x0000023B647B0000-0x0000023B647B1000-memory.dmp
memory/1092-10-0x0000023B64760000-0x0000023B64761000-memory.dmp
memory/1092-8-0x0000023B64740000-0x0000023B64741000-memory.dmp
memory/1092-6-0x0000023B64720000-0x0000023B64721000-memory.dmp
memory/1092-19-0x0000023B647F0000-0x0000023B647F1000-memory.dmp
memory/1092-23-0x0000023B64830000-0x0000023B64831000-memory.dmp
memory/1092-22-0x0000023B64820000-0x0000023B64821000-memory.dmp
memory/1092-21-0x0000023B64810000-0x0000023B64811000-memory.dmp
memory/1092-20-0x0000023B64800000-0x0000023B64801000-memory.dmp
memory/1092-18-0x0000023B647E0000-0x0000023B647E1000-memory.dmp
memory/1092-17-0x0000023B647D0000-0x0000023B647D1000-memory.dmp
memory/1092-24-0x00007FF7BD400000-0x00007FF7BD9BD000-memory.dmp