Analysis
- max time kernel
148s - max time network
130s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
07/11/2026, 22:50
General
- Target windows-image-format-converter-v1.1.0-candidate/圖片格式轉換器-v1.1.0.exe
- Size 46KB
- Sample261107-2sefhagv2n
- SHA256 9c210353f98e7dc6eab25eea7c380f9a441343ac4bbce6c2f95309ee0c32c334
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\windows-image-format-converter-v1.1.0-candidate\圖片格式轉換器-v1.1.0.exe"C:\Users\Admin\AppData\Local\Temp\windows-image-format-converter-v1.1.0-candidate\圖片格式轉換器-v1.1.0.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1252-1-0x0000000000D10000-0x0000000000D20000-memory.dmp
memory/1252-0-0x00007FFC0AD5F000-0x00007FFC0AD60000-memory.dmp
memory/1252-2-0x00007FFC0ABD0000-0x00007FFC0B574000-memory.dmp
memory/1252-5-0x00007FFC0ABD0000-0x00007FFC0B574000-memory.dmp
memory/1252-6-0x00007FFC0ABD0000-0x00007FFC0B574000-memory.dmp
memory/1252-8-0x00007FFC0ABD0000-0x00007FFC0B574000-memory.dmp
memory/1252-7-0x000000001C830000-0x000000001C852000-memory.dmp
memory/1252-9-0x00007FFC0ABD0000-0x00007FFC0B574000-memory.dmp
memory/1252-10-0x00007FFC0ABD0000-0x00007FFC0B574000-memory.dmp
memory/1252-11-0x00007FFC0ABD0000-0x00007FFC0B574000-memory.dmp
memory/1252-12-0x00007FFC0ABD0000-0x00007FFC0B574000-memory.dmp
memory/1252-13-0x00007FFC0ABD0000-0x00007FFC0B574000-memory.dmp
memory/1252-14-0x00007FFC0ABD0000-0x00007FFC0B574000-memory.dmp
memory/1252-15-0x00007FFC0ABD0000-0x00007FFC0B574000-memory.dmp
memory/1252-16-0x00007FFC0ABD0000-0x00007FFC0B574000-memory.dmp
memory/1252-17-0x00007FFC0ABD0000-0x00007FFC0B574000-memory.dmp