Analysis
- user interaction
yes - max time kernel
298s - max time network
154s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
- submitted
02/11/2026, 15:01
General
- Target payload.exe
- Size 3.4MB
- Sample261102-sd24ksc14n
- SHA256 bb231cda5f26dcf2945445951613a4185254abb11a7c981dadfe280c7b7c8079
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\payload.exe"C:\Users\Admin\AppData\Local\Temp\payload.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3204-2-0x00007FF61F360000-0x00007FF61F946000-memory.dmp
memory/3204-3-0x00007FF61F360000-0x00007FF61F946000-memory.dmp
memory/3204-1-0x00007FFAD4810000-0x00007FFAD4812000-memory.dmp
memory/3204-0-0x00007FF61F3CF000-0x00007FF61F5DA000-memory.dmp
memory/3204-7-0x00007FF61F3CF000-0x00007FF61F5DA000-memory.dmp
memory/3204-6-0x00007FF61F360000-0x00007FF61F946000-memory.dmp