Analysis
- max time kernel
150s - max time network
144s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
02/11/2026, 04:38
General
- Target lowshit.exe
- Size 13.7MB
- Sample261102-e9xl3szzas
- SHA256 70f513a76fe392c392aee653fac4ae9850d2ffc9c7784fc6c9feaf836f496893
Score
7/10
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
- Suspicious behavior: EnumeratesProcesses 2 IoCs
- Suspicious behavior: LoadsDriver 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\lowshit.exe"C:\Users\Admin\AppData\Local\Temp\lowshit.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
-
C:\Users\Admin\AppData\Local\Temp\inpoutx64.sysC:\Users\Admin\AppData\Local\Temp\inpoutx64.sys1⤵
- Executes dropped EXE
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
inpoutx64.sys
memory/620-11-0x0000000000010000-0x0000000000017000-memory.dmp
memory/4984-0-0x00007FF667B23000-0x00007FF6682E8000-memory.dmp
memory/4984-1-0x00007FFC1E8D0000-0x00007FFC1E8D2000-memory.dmp
memory/4984-2-0x00007FF6679A0000-0x00007FF6690A0000-memory.dmp
memory/4984-7-0x00007FF667B23000-0x00007FF6682E8000-memory.dmp
memory/4984-8-0x00007FF6679A0000-0x00007FF6690A0000-memory.dmp
memory/4984-12-0x00007FF667B23000-0x00007FF6682E8000-memory.dmp
memory/4984-13-0x00007FF6679A0000-0x00007FF6690A0000-memory.dmp