Analysis
- user interaction
yes - max time kernel
14s - max time network
7s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260911-en - resource tags
- submitted
30/10/2026, 04:31
General
- Target BRMods.exe
- Size 42.8MB
- Sample261030-e5kfyshs5t
- SHA256 f76693e75c399ed7703e5feda6b8e930e793d14ab25f9ba931f4d11de1bc5cdf
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 TTPs 1 IoCs
- Suspicious behavior: EnumeratesProcesses 6 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\BRMods.exe"C:\Users\Admin\AppData\Local\Temp\BRMods.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2296-0-0x00007FF6B19AA000-0x00007FF6B43D1000-memory.dmp
memory/2296-3-0x00007FF978B80000-0x00007FF978B82000-memory.dmp
memory/2296-6-0x00007FF9777B0000-0x00007FF9777B2000-memory.dmp
memory/2296-5-0x00007FF9777A0000-0x00007FF9777A2000-memory.dmp
memory/2296-4-0x00007FF978B90000-0x00007FF978B92000-memory.dmp
memory/2296-2-0x00007FF9799C0000-0x00007FF9799C2000-memory.dmp
memory/2296-1-0x00007FF9799B0000-0x00007FF9799B2000-memory.dmp
memory/2296-8-0x00007FF9799E0000-0x00007FF9799E2000-memory.dmp
memory/2296-7-0x00007FF9799D0000-0x00007FF9799D2000-memory.dmp
memory/2296-13-0x00007FF6B1980000-0x00007FF6B6E99000-memory.dmp
memory/2296-14-0x00007FF6B19AA000-0x00007FF6B43D1000-memory.dmp