Analysis
- max time kernel
151s - max time network
131s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
27/10/2026, 17:50
General
- Target Client.exe
- Size 15.5MB
- Sample261027-wemxtseb82
- SHA256 0a8aa182cda50a9be584926927a3a1432bac28b8f1972de764663977fb3f6194
Malware Config
Signatures
- Loads dropped DLL 3 IoCs
- Suspicious behavior: MapViewOfSection 1 TTPs 10 IoCs
- Suspicious use of WriteProcessMemory 15 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Client.exe"C:\Users\Admin\AppData\Local\Temp\Client.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\Client.exe"C:\Users\Admin\AppData\Local\Temp\Client.exe"2⤵
- Loads dropped DLL
- Suspicious behavior: MapViewOfSection
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\tcpsvcs.exe"C:\Windows\system32\tcpsvcs.exe" Vape_V4.exe3⤵
- Suspicious behavior: MapViewOfSection
-
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
base_library.zip
python310.dll
ucrtbase.dll
vcruntime140.dll
memory/1864-639-0x00007FF824700000-0x00007FF824963000-memory.dmp
memory/1864-815-0x0000000140000000-0x000000014096E000-memory.dmp
memory/1864-814-0x00007FF824700000-0x00007FF824963000-memory.dmp
memory/1864-637-0x00007FF824700000-0x00007FF824963000-memory.dmp
memory/1864-428-0x0000000140000000-0x000000014096E000-memory.dmp
memory/1864-672-0x00007FF824700000-0x00007FF824963000-memory.dmp
memory/1864-638-0x00007FF824700000-0x00007FF824963000-memory.dmp
memory/1864-635-0x00007FF824700000-0x00007FF824963000-memory.dmp
memory/1864-658-0x00007FF824700000-0x00007FF824963000-memory.dmp
memory/1864-636-0x00007FF824700000-0x00007FF824963000-memory.dmp
memory/1864-605-0x00007FF824700000-0x00007FF824963000-memory.dmp
memory/1864-659-0x00007FF824700000-0x00007FF824963000-memory.dmp
memory/1864-657-0x00007FF824700000-0x00007FF824963000-memory.dmp
memory/5692-278-0x00007FF824530000-0x00007FF824531000-memory.dmp
memory/5692-271-0x00007FF824620000-0x00007FF824621000-memory.dmp
memory/5692-59-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-56-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-41-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-55-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-54-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-53-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-52-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-51-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-50-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-49-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-48-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-47-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-46-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-45-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-44-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-43-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-42-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-39-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-60-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-38-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-37-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-35-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-34-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-32-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-243-0x00000000001D0000-0x00000000001D1000-memory.dmp
memory/5692-30-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-254-0x00007FF824560000-0x00007FF824561000-memory.dmp
memory/5692-269-0x00007FF824610000-0x00007FF824611000-memory.dmp
memory/5692-280-0x00007FF82485F000-0x00007FF824860000-memory.dmp
memory/5692-293-0x00007FF824700000-0x00007FF824963000-memory.dmp
memory/5692-295-0x00007FF824700000-0x00007FF824963000-memory.dmp
memory/5692-297-0x00007FF824700000-0x00007FF824963000-memory.dmp
memory/5692-279-0x00007FF824520000-0x00007FF824521000-memory.dmp
memory/5692-61-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-276-0x00007FF824540000-0x00007FF824541000-memory.dmp
memory/5692-266-0x00007FF8245E0000-0x00007FF8245E1000-memory.dmp
memory/5692-264-0x00007FF8245F0000-0x00007FF8245F1000-memory.dmp
memory/5692-317-0x00007FF824700000-0x00007FF824963000-memory.dmp
memory/5692-262-0x00007FF8246C0000-0x00007FF8246C1000-memory.dmp
memory/5692-258-0x00007FF824580000-0x00007FF824581000-memory.dmp
memory/5692-256-0x00007FF824600000-0x00007FF824601000-memory.dmp
memory/5692-255-0x00007FF824590000-0x00007FF824591000-memory.dmp
memory/5692-274-0x00007FF824550000-0x00007FF824551000-memory.dmp
memory/5692-58-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-260-0x00007FF8246F0000-0x00007FF8246F1000-memory.dmp
memory/5692-257-0x00007FF8246E0000-0x00007FF8246E1000-memory.dmp
memory/5692-40-0x0000000140000000-0x000000014096E000-memory.dmp
memory/5692-29-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-28-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-27-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-26-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-25-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-24-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-23-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-22-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-21-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-20-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-19-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-18-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-17-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-16-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-15-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-14-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-13-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-12-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-11-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-10-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-9-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-8-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-4-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-2-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-1-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-62-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-57-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-63-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-65-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-64-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-67-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-68-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-36-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-33-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-0-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-7-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-31-0x00000000021A0000-0x00000000022F1000-memory.dmp
memory/5692-634-0x0000000140000000-0x000000014096E000-memory.dmp
memory/5692-831-0x00007FF824700000-0x00007FF824963000-memory.dmp
memory/5692-832-0x0000000140000000-0x000000014096E000-memory.dmp