Analysis
- max time kernel
151s - max time network
134s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
29/10/2026, 22:47
General
- Target LOXARA_halloween_the_game.exe
- Size 85.1MB
- Sample261029-2qqqrafv31
- SHA256 80262e99ba7aa4f145fc7bfd9c9f507ff768a6e7904d8f60ae3f3c0a2be4e352
Malware Config
Signatures
- Loads dropped DLL 3 IoCs
- Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
- Suspicious use of AdjustPrivilegeToken 3 IoCs
- System policy modification 1 TTPs 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\LOXARA_halloween_the_game.exe"C:\Users\Admin\AppData\Local\Temp\LOXARA_halloween_the_game.exe"1⤵
- Loads dropped DLL
- Enumerates connected drives
- Suspicious use of AdjustPrivilegeToken
- System policy modification
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
WMSDKNS.XML.bak
D3DCompiler_47_cor3.dll
PresentationNative_cor3.dll
wpfgfx_cor3.dll
memory/2144-62-0x000001C926830000-0x000001C926850000-memory.dmp
memory/2144-14-0x000001C926190000-0x000001C9263C0000-memory.dmp
memory/2144-66-0x000001C902610000-0x000001C902640000-memory.dmp
memory/2144-54-0x000001C9267F0000-0x000001C926810000-memory.dmp
memory/2144-30-0x000001C900000000-0x000001C900830000-memory.dmp
memory/2144-70-0x000001C929020000-0x000001C929040000-memory.dmp
memory/2144-6-0x000001C925020000-0x000001C925CB0000-memory.dmp
memory/2144-58-0x000001C928FA0000-0x000001C928FE0000-memory.dmp
memory/2144-50-0x000001C9267B0000-0x000001C9267D0000-memory.dmp
memory/2144-46-0x000001C926780000-0x000001C9267A0000-memory.dmp
memory/2144-42-0x000001C923B00000-0x000001C923B10000-memory.dmp
memory/2144-38-0x000001C925EE0000-0x000001C925F00000-memory.dmp
memory/2144-34-0x000001C926440000-0x000001C9264C0000-memory.dmp
memory/2144-79-0x000001C9027D0000-0x000001C9028E0000-memory.dmp
memory/2144-81-0x000001C902640000-0x000001C902690000-memory.dmp
memory/2144-22-0x000001C923AB0000-0x000001C923B00000-memory.dmp
memory/2144-89-0x000001C902990000-0x000001C9029C0000-memory.dmp
memory/2144-85-0x000001C903460000-0x000001C903C00000-memory.dmp
memory/2144-130-0x000001C9050D0000-0x000001C905140000-memory.dmp
memory/2144-97-0x000001C902B30000-0x000001C902B60000-memory.dmp
memory/2144-101-0x000001C904000000-0x000001C9040C0000-memory.dmp
memory/2144-105-0x000001C9029C0000-0x000001C9029E0000-memory.dmp
memory/2144-117-0x000001C902B90000-0x000001C902BB0000-memory.dmp
memory/2144-113-0x000001C904110000-0x000001C904160000-memory.dmp
memory/2144-109-0x000001C902940000-0x000001C902950000-memory.dmp
memory/2144-121-0x000001C904FC0000-0x000001C905010000-memory.dmp
memory/2144-26-0x000001C926400000-0x000001C926440000-memory.dmp
memory/2144-18-0x000001C923C40000-0x000001C923DA0000-memory.dmp
memory/2144-93-0x000001C902AA0000-0x000001C902B30000-memory.dmp
memory/2144-134-0x000001C904F40000-0x000001C904F50000-memory.dmp
memory/2144-138-0x000001C905260000-0x000001C905270000-memory.dmp
memory/2144-142-0x000001C908150000-0x000001C9082C0000-memory.dmp
memory/2144-146-0x000001C907310000-0x000001C907330000-memory.dmp
memory/2144-150-0x000001C908330000-0x000001C908370000-memory.dmp
memory/2144-10-0x000001C9277D0000-0x000001C928730000-memory.dmp
memory/2144-163-0x000001C90C250000-0x000001C90C2B0000-memory.dmp