Analysis
- max time kernel
149s - platform
windows11-21h2_x64 - resource
win11-20260911-en - resource tags
- submitted
04/11/2026, 19:02
General
- Target Korsakoff GUI.exe
- Size 2.8MB
- Sample261104-xp378stygv
- SHA256 7de2cea01011401058b4f54580befae1d07fb46bf0698b42328bb1cba2ef8dad
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\Korsakoff GUI.exe"C:\Users\Admin\AppData\Local\Temp\Korsakoff GUI.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1004-0-0x00007FF8CAA45000-0x00007FF8CAA46000-memory.dmp
memory/1004-1-0x00007FF8CA790000-0x00007FF8CB131000-memory.dmp
memory/1004-2-0x000000001CA60000-0x000000001CF2E000-memory.dmp
memory/1004-4-0x000000001C400000-0x000000001C49C000-memory.dmp
memory/1004-3-0x00007FF8CA790000-0x00007FF8CB131000-memory.dmp
memory/1004-5-0x00007FF8CA790000-0x00007FF8CB131000-memory.dmp
memory/1004-6-0x00007FF8CA790000-0x00007FF8CB131000-memory.dmp
memory/1004-8-0x00007FF8CA790000-0x00007FF8CB131000-memory.dmp
memory/1004-7-0x0000000001B30000-0x0000000001B38000-memory.dmp
memory/1004-9-0x00007FF8CA790000-0x00007FF8CB131000-memory.dmp
memory/1004-10-0x00007FF8CA790000-0x00007FF8CB131000-memory.dmp
memory/1004-11-0x00007FF8CA790000-0x00007FF8CB131000-memory.dmp
memory/1004-12-0x00007FF8CA790000-0x00007FF8CB131000-memory.dmp
memory/1004-13-0x00007FF8CA790000-0x00007FF8CB131000-memory.dmp
memory/1004-14-0x00007FF8CA790000-0x00007FF8CB131000-memory.dmp
memory/1004-15-0x00007FF8CA790000-0x00007FF8CB131000-memory.dmp
memory/1004-16-0x00007FF8CA790000-0x00007FF8CB131000-memory.dmp
memory/1004-17-0x00007FF8CA790000-0x00007FF8CB131000-memory.dmp
memory/1004-18-0x00007FF8CA790000-0x00007FF8CB131000-memory.dmp
memory/1004-19-0x00007FF8CA790000-0x00007FF8CB131000-memory.dmp
memory/1004-20-0x00007FF8CA790000-0x00007FF8CB131000-memory.dmp
memory/1004-21-0x00007FF8CAA45000-0x00007FF8CAA46000-memory.dmp
memory/1004-22-0x00007FF8CA790000-0x00007FF8CB131000-memory.dmp
memory/1004-23-0x00007FF8CA790000-0x00007FF8CB131000-memory.dmp
memory/1004-24-0x00007FF8CA790000-0x00007FF8CB131000-memory.dmp
memory/1004-25-0x00007FF8CA790000-0x00007FF8CB131000-memory.dmp