Analysis
- user interaction
yes - max time kernel
149s - max time network
146s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
- submitted
27/10/2026, 16:07
General
- Target n5qkchvzsacr7u20.exe
- Size 332KB
- Sample261027-tkwe2set6t
- SHA256 434f3997026906a576ffc497658dcc921fb93923e5fa75572665adcc704cd3c7
Score
3/10
Malware Config
Signatures
- Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
- Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\n5qkchvzsacr7u20.exe"C:\Users\Admin\AppData\Local\Temp\n5qkchvzsacr7u20.exe"1⤵
- Reads the TCP/IP host and domain name from the registry
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1552-0-0x000001F783600000-0x000001F783658000-memory.dmp
memory/1552-1-0x000001F783B00000-0x000001F783B10000-memory.dmp
memory/1552-2-0x000001F783B00000-0x000001F783B10000-memory.dmp