Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
02/11/2026, 09:34
General
- Target 2026-11-01_c2929a55438428502db882775f257312_helldown_remcos.exe
- Size 1.1MB
- Sample261102-lj59vsef76
- SHA256 6132ac8b9b3929c3e83c4de679554f8fe665a75f8a344d648dc4db28da930613
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-11-01_c2929a55438428502db882775f257312_helldown_remcos.exe"C:\Users\Admin\AppData\Local\Temp\2026-11-01_c2929a55438428502db882775f257312_helldown_remcos.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\2026-11-01_c2929a55438428502db882775f257312_helldown_remcos.exe"C:\Users\Admin\AppData\Local\Temp\2026-11-01_c2929a55438428502db882775f257312_helldown_remcos.exe"2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5628-0-0x0000022172250000-0x0000022172251000-memory.dmp
memory/5628-1-0x0000022172260000-0x0000022172261000-memory.dmp
memory/5628-3-0x0000022172280000-0x0000022172281000-memory.dmp
memory/5628-2-0x0000022172270000-0x0000022172271000-memory.dmp
memory/5628-4-0x0000022172290000-0x0000022172291000-memory.dmp
memory/5628-5-0x00000221722A0000-0x00000221722A1000-memory.dmp