Resubmissions
02/11/2026, 14:51
261102-r8eq4acz8l502/11/2026, 14:30
261102-rt5zqsax41502/11/2026, 14:27
261102-rsljpswz8j6Analysis
- max time kernel
874s - max time network
477s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
02/11/2026, 14:30
General
- Target filezilla.exe
- Size 4.1MB
- Sample261102-rt5zqsax41
- SHA256 84ade0a797ffab4771eb4b0521b4404ec0be86e91824bbe0dafb69c099d74828
Malware Config
Signatures
- Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\filezilla.exe"C:\Users\Admin\AppData\Local\Temp\filezilla.exe"1⤵
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5884-1-0x000002376C700000-0x000002376CEAC000-memory.dmp
memory/5884-0-0x00007FF7446A0000-0x00007FF744AC8000-memory.dmp
memory/5884-50-0x00007FFF45700000-0x00007FFF4573E000-memory.dmp
memory/5884-51-0x00007FFF456C0000-0x00007FFF45700000-memory.dmp
memory/5884-53-0x0000000066380000-0x00000000664BB000-memory.dmp
memory/5884-52-0x00007FFF40D40000-0x00007FFF40F73000-memory.dmp
memory/5884-46-0x00007FFF40F80000-0x00007FFF41492000-memory.dmp
memory/5884-44-0x00007FFF414A0000-0x00007FFF416D1000-memory.dmp
memory/5884-41-0x00007FFF49C70000-0x00007FFF49D14000-memory.dmp
memory/5884-36-0x00007FFF4D2F0000-0x00007FFF4D399000-memory.dmp
memory/5884-35-0x00007FFF48020000-0x00007FFF48144000-memory.dmp
memory/5884-33-0x00007FFF45820000-0x00007FFF45994000-memory.dmp
memory/5884-31-0x00007FF7446A0000-0x00007FF744AC8000-memory.dmp
memory/5884-48-0x00007FFF55230000-0x00007FFF55241000-memory.dmp
memory/5884-47-0x00007FFF45780000-0x00007FFF457B4000-memory.dmp
memory/5884-45-0x00007FFF457C0000-0x00007FFF45819000-memory.dmp
memory/5884-43-0x00007FFF48980000-0x00007FFF489C6000-memory.dmp
memory/5884-42-0x00007FFF59710000-0x00007FFF59722000-memory.dmp
memory/5884-40-0x00007FFF48350000-0x00007FFF4841A000-memory.dmp
memory/5884-37-0x00007FFF4A080000-0x00007FFF4A106000-memory.dmp
memory/5884-32-0x00007FFF541C0000-0x00007FFF54227000-memory.dmp
memory/5884-49-0x000000005E0E0000-0x000000005E109000-memory.dmp
memory/5884-39-0x00007FFF49D20000-0x00007FFF49D66000-memory.dmp
memory/5884-38-0x00007FFF54910000-0x00007FFF5493B000-memory.dmp
memory/5884-34-0x00007FFF44F50000-0x00007FFF45122000-memory.dmp