Analysis
- user interaction
yes - max time kernel
150s - max time network
143s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
02/11/2026, 15:51
General
- Target XenorUnpack.exe
- Size 64.7MB
- Sample261102-tamp6abs6v
- SHA256 fa0be85a5189c49ffc44bd840932c8d32fe4302fbec4a9b51deba6a31845d8eb
Malware Config
Signatures
- Loads dropped DLL 3 IoCs
- Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\XenorUnpack.exe"C:\Users\Admin\AppData\Local\Temp\XenorUnpack.exe"1⤵
- Loads dropped DLL
- Reads the TCP/IP host and domain name from the registry
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
D3DCompiler_47_cor3.dll
PresentationNative_cor3.dll
wpfgfx_cor3.dll
memory/936-18-0x0000017E15520000-0x0000017E15680000-memory.dmp
memory/936-191-0x0000017E23010000-0x0000017E23020000-memory.dmp
memory/936-54-0x0000017E177C0000-0x0000017E177E0000-memory.dmp
memory/936-70-0x0000017E17880000-0x0000017E178A0000-memory.dmp
memory/936-66-0x0000017E178D0000-0x0000017E17900000-memory.dmp
memory/936-14-0x0000017E12D80000-0x0000017E12FA0000-memory.dmp
memory/936-85-0x0000017E1B680000-0x0000017E1BDF0000-memory.dmp
memory/936-89-0x0000017E1A990000-0x0000017E1A9C0000-memory.dmp
memory/936-97-0x0000017E1AC70000-0x0000017E1AC90000-memory.dmp
memory/936-113-0x0000017E1AD00000-0x0000017E1AD20000-memory.dmp
memory/936-109-0x0000017E1CBF0000-0x0000017E1CC30000-memory.dmp
memory/936-105-0x0000017E1ACC0000-0x0000017E1ACE0000-memory.dmp
memory/936-101-0x0000017E1ADE0000-0x0000017E1AEA0000-memory.dmp
memory/936-93-0x0000017E1AC20000-0x0000017E1AC30000-memory.dmp
memory/936-77-0x0000017E1AAC0000-0x0000017E1ABC0000-memory.dmp
memory/936-81-0x0000017E17930000-0x0000017E17980000-memory.dmp
memory/936-62-0x0000017E17860000-0x0000017E17880000-memory.dmp
memory/936-58-0x0000017E17820000-0x0000017E17840000-memory.dmp
memory/936-50-0x0000017E177A0000-0x0000017E177C0000-memory.dmp
memory/936-46-0x0000017E15300000-0x0000017E15310000-memory.dmp
memory/936-35-0x0000017E18190000-0x0000017E18980000-memory.dmp
memory/936-26-0x0000017E15710000-0x0000017E15750000-memory.dmp
memory/936-22-0x0000017E15680000-0x0000017E156D0000-memory.dmp
memory/936-6-0x0000017E13EF0000-0x0000017E14E40000-memory.dmp
memory/936-38-0x0000017E15320000-0x0000017E15340000-memory.dmp
memory/936-10-0x0000017E166C0000-0x0000017E175E0000-memory.dmp
memory/936-162-0x0000017E1D0C0000-0x0000017E1D0D0000-memory.dmp
memory/936-117-0x0000017E1CF00000-0x0000017E1D0B0000-memory.dmp
memory/936-129-0x0000017E1D300000-0x0000017E1D3A0000-memory.dmp
memory/936-137-0x0000017E1DB60000-0x0000017E1DD30000-memory.dmp
memory/936-133-0x0000017E1D720000-0x0000017E1D990000-memory.dmp
memory/936-145-0x0000017E1D3A0000-0x0000017E1D3C0000-memory.dmp
memory/936-141-0x0000017E1E070000-0x0000017E1E120000-memory.dmp
memory/936-149-0x0000017E1E150000-0x0000017E1E180000-memory.dmp
memory/936-154-0x0000017E1E200000-0x0000017E1E250000-memory.dmp
memory/936-121-0x0000017E1CCF0000-0x0000017E1CD30000-memory.dmp
memory/936-158-0x0000017E1E2F0000-0x0000017E1E350000-memory.dmp
memory/936-30-0x0000017E175E0000-0x0000017E17630000-memory.dmp
memory/936-42-0x0000017E17720000-0x0000017E177A0000-memory.dmp
memory/936-171-0x0000017E1E3C0000-0x0000017E1E430000-memory.dmp
memory/936-175-0x0000017E1D0B0000-0x0000017E1D0C0000-memory.dmp
memory/936-179-0x0000017E1E190000-0x0000017E1E1A0000-memory.dmp
memory/936-183-0x0000017E236B0000-0x0000017E23810000-memory.dmp
memory/936-187-0x0000017E22FD0000-0x0000017E22FF0000-memory.dmp
memory/936-125-0x0000017E1D170000-0x0000017E1D1F0000-memory.dmp
memory/936-195-0x0000017E238B0000-0x0000017E23930000-memory.dmp
memory/936-200-0x0000017E24B00000-0x0000017E24B20000-memory.dmp
memory/936-207-0x0000017E24DE0000-0x0000017E24E00000-memory.dmp
memory/936-203-0x0000017E24D80000-0x0000017E24DB0000-memory.dmp
memory/936-211-0x0000017E24EB0000-0x0000017E24EF0000-memory.dmp
memory/936-218-0x0000017E24950000-0x0000017E24960000-memory.dmp