Analysis
- max time kernel
150s - max time network
129s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
30/10/2026, 03:31
General
- Target HOT WHEELS UNLEASHED v1.0 Plus 10 Trainer.exe
- Size 1.2MB
- Sample261030-d3grlsat5k
- SHA256 115124b9aa3a6dda14a267f6babf37a736daff1eada3038cb7cd75a1f5222b41
Malware Config
Signatures
- Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
- Suspicious behavior: EnumeratesProcesses 64 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\HOT WHEELS UNLEASHED v1.0 Plus 10 Trainer.exe"C:\Users\Admin\AppData\Local\Temp\HOT WHEELS UNLEASHED v1.0 Plus 10 Trainer.exe"1⤵
- Reads the TCP/IP host and domain name from the registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2924-0-0x00007FFA3D42F000-0x00007FFA3D430000-memory.dmp
memory/2924-1-0x00000218A5350000-0x00000218A538E000-memory.dmp
memory/2924-2-0x00007FFA3D2A0000-0x00007FFA3DC44000-memory.dmp
memory/2924-3-0x00007FFA3D2A0000-0x00007FFA3DC44000-memory.dmp
memory/2924-4-0x00007FFA3D2A0000-0x00007FFA3DC44000-memory.dmp
memory/2924-5-0x00007FFA3D2A0000-0x00007FFA3DC44000-memory.dmp
memory/2924-6-0x00007FFA3D2A0000-0x00007FFA3DC44000-memory.dmp
memory/2924-7-0x00007FFA3D2A0000-0x00007FFA3DC44000-memory.dmp
memory/2924-8-0x00007FFA3D2A0000-0x00007FFA3DC44000-memory.dmp
memory/2924-12-0x00007FFA3D2A0000-0x00007FFA3DC44000-memory.dmp
memory/2924-13-0x00007FFA3D2A0000-0x00007FFA3DC44000-memory.dmp
memory/2924-26-0x00007FFA3D2A0000-0x00007FFA3DC44000-memory.dmp
memory/2924-27-0x00007FFA3D2A0000-0x00007FFA3DC44000-memory.dmp
memory/2924-28-0x00007FFA3D2A0000-0x00007FFA3DC44000-memory.dmp
memory/2924-29-0x00007FFA3D2A0000-0x00007FFA3DC44000-memory.dmp
memory/2924-30-0x00007FFA3D2A0000-0x00007FFA3DC44000-memory.dmp
memory/2924-31-0x00007FFA3D2A0000-0x00007FFA3DC44000-memory.dmp