Analysis
- max time kernel
2s - max time network
6s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
10/11/2026, 22:46
Errors
General
- Target AngryVirus.exe
- Size 482KB
- Sample261110-2px4faca83
- SHA256 b6dac480e4c7f15e8de6633ee9b52b3bda0b6b2f1897a76ddb4ab0ffb76b2588
Malware Config
Signatures
- Scheduled Task/Job: Scheduled Task 1 TTPs 1 IoCs
Schtasks is often used by malware for persistence or to perform post-infection execution.
Processes
-
C:\Users\Admin\AppData\Local\Temp\AngryVirus.exe"C:\Users\Admin\AppData\Local\Temp\AngryVirus.exe"1⤵
-
C:\Windows\System32\schtasks.exe"C:\Windows\System32\schtasks.exe" /Create /F /TN "MasonMBR" /SC ONLOGON /TR "C:\Users\Admin\AppData\Local\Temp\\MasonMBR.exe" /RL HIGHEST2⤵
- Scheduled Task/Job: Scheduled Task
-
-
C:\Users\Admin\AppData\Local\Temp\MasonMBR-S.exe"C:\Users\Admin\AppData\Local\Temp\MasonMBR-S.exe"2⤵
-
-
C:\Users\Admin\AppData\Local\Temp\MasonGDI.exe"C:\Users\Admin\AppData\Local\Temp\MasonGDI.exe"2⤵
-
-
C:\Users\Admin\AppData\Local\Temp\MasonRootkit.exe"C:\Users\Admin\AppData\Local\Temp\MasonRootkit.exe"2⤵
-
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x00000000000004F4 0x00000000000004FC1⤵
-
C:\Users\Admin\AppData\Local\Temp\MasonMBR.exeC:\Users\Admin\AppData\Local\Temp\\MasonMBR.exe1⤵
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
MasonGDI.exe
MasonMBR-S.exe
MasonMBR.exe
MasonRootkit.exe
memory/744-50-0x0000018946080000-0x00000189460AB000-memory.dmp
memory/744-46-0x0000018946050000-0x0000018946075000-memory.dmp
memory/744-52-0x00007FFAE0720000-0x00007FFAE0730000-memory.dmp
memory/960-54-0x0000022F37AD0000-0x0000022F37AFB000-memory.dmp
memory/960-131-0x00007FFAE0720000-0x00007FFAE0730000-memory.dmp
memory/968-138-0x00007FFAE0720000-0x00007FFAE0730000-memory.dmp
memory/968-137-0x0000024EA5A50000-0x0000024EA5A7B000-memory.dmp
memory/1016-56-0x00007FFAE0720000-0x00007FFAE0730000-memory.dmp
memory/1016-55-0x0000019930610000-0x000001993063B000-memory.dmp
memory/1028-141-0x00007FFAE0720000-0x00007FFAE0730000-memory.dmp
memory/1028-140-0x000001E6FE470000-0x000001E6FE49B000-memory.dmp
memory/1112-144-0x00007FFAE0720000-0x00007FFAE0730000-memory.dmp
memory/1112-143-0x000001E809EE0000-0x000001E809F0B000-memory.dmp
memory/1160-61-0x00007FFAE0720000-0x00007FFAE0730000-memory.dmp
memory/1160-60-0x0000018143AE0000-0x0000018143B0B000-memory.dmp
memory/1244-146-0x000002CB90D40000-0x000002CB90D6B000-memory.dmp
memory/1244-147-0x00007FFAE0720000-0x00007FFAE0730000-memory.dmp
memory/1296-150-0x00007FFAE0720000-0x00007FFAE0730000-memory.dmp
memory/1296-149-0x0000019005BA0000-0x0000019005BCB000-memory.dmp
memory/1328-153-0x00007FFAE0720000-0x00007FFAE0730000-memory.dmp
memory/1328-152-0x000002A1373B0000-0x000002A1373DB000-memory.dmp
memory/1512-176-0x000001CFB7D70000-0x000001CFB7D9B000-memory.dmp
memory/1512-177-0x00007FFAE0720000-0x00007FFAE0730000-memory.dmp
memory/1536-155-0x000002FBB02A0000-0x000002FBB02CB000-memory.dmp
memory/1536-156-0x00007FFAE0720000-0x00007FFAE0730000-memory.dmp
memory/1572-68-0x0000027C29650000-0x0000027C2967B000-memory.dmp
memory/1572-69-0x00007FFAE0720000-0x00007FFAE0730000-memory.dmp
memory/1644-158-0x000001B9C9A10000-0x000001B9C9A3B000-memory.dmp
memory/1644-159-0x00007FFAE0720000-0x00007FFAE0730000-memory.dmp
memory/1712-179-0x0000021456D10000-0x0000021456D3B000-memory.dmp
memory/1712-180-0x00007FFAE0720000-0x00007FFAE0730000-memory.dmp
memory/1760-161-0x0000022D783C0000-0x0000022D783EB000-memory.dmp
memory/1760-162-0x00007FFAE0720000-0x00007FFAE0730000-memory.dmp
memory/1784-165-0x00007FFAE0720000-0x00007FFAE0730000-memory.dmp
memory/1784-164-0x00000226BD820000-0x00000226BD84B000-memory.dmp
memory/1824-168-0x00007FFAE0720000-0x00007FFAE0730000-memory.dmp
memory/1824-167-0x0000028294CB0000-0x0000028294CDB000-memory.dmp
memory/1988-171-0x00007FFAE0720000-0x00007FFAE0730000-memory.dmp
memory/1988-170-0x000001BBD65C0000-0x000001BBD65EB000-memory.dmp
memory/2044-174-0x00007FFAE0720000-0x00007FFAE0730000-memory.dmp
memory/2044-173-0x0000015EFAEF0000-0x0000015EFAF1B000-memory.dmp
memory/2080-35-0x00007FFAFD7A0000-0x00007FFAFE144000-memory.dmp
memory/2080-22-0x0000000000A80000-0x0000000000A94000-memory.dmp
memory/2128-182-0x0000021EEED30000-0x0000021EEED5B000-memory.dmp
memory/2128-183-0x00007FFAE0720000-0x00007FFAE0730000-memory.dmp
memory/2192-185-0x000001B2F0DA0000-0x000001B2F0DCB000-memory.dmp
memory/2192-186-0x00007FFAE0720000-0x00007FFAE0730000-memory.dmp
memory/2284-188-0x000001F2B7880000-0x000001F2B78AB000-memory.dmp
memory/2284-189-0x00007FFAE0720000-0x00007FFAE0730000-memory.dmp
memory/2360-191-0x0000018A74E60000-0x0000018A74E8B000-memory.dmp
memory/2360-192-0x00007FFAE0720000-0x00007FFAE0730000-memory.dmp
memory/2484-38-0x00007FFAFD7A0000-0x00007FFAFE144000-memory.dmp
memory/2484-1-0x0000000000980000-0x00000000009FE000-memory.dmp
memory/2484-4-0x00007FFAFD7A0000-0x00007FFAFE144000-memory.dmp
memory/2484-2-0x000000001B5B0000-0x000000001B606000-memory.dmp
memory/2484-3-0x00007FFAFD7A0000-0x00007FFAFE144000-memory.dmp
memory/2484-0-0x00007FFAFD92F000-0x00007FFAFD930000-memory.dmp
memory/2508-194-0x000001A10DE70000-0x000001A10DE9B000-memory.dmp
memory/2508-195-0x00007FFAE0720000-0x00007FFAE0730000-memory.dmp
memory/2548-198-0x00007FFAE0720000-0x00007FFAE0730000-memory.dmp
memory/2548-197-0x00000287C4030000-0x00000287C405B000-memory.dmp
memory/2596-201-0x00007FFAE0720000-0x00007FFAE0730000-memory.dmp
memory/2596-200-0x000001F668E80000-0x000001F668EAB000-memory.dmp
memory/2628-203-0x00000218B4890000-0x00000218B48BB000-memory.dmp
memory/4620-39-0x0000000000770000-0x000000000079A000-memory.dmp
memory/4620-40-0x0000000006480000-0x0000000006512000-memory.dmp
memory/4628-37-0x00007FFB1FF70000-0x00007FFB20037000-memory.dmp
memory/4628-36-0x00007FFB205E0000-0x00007FFB20843000-memory.dmp
memory/4956-110-0x0000014CB76A0000-0x0000014CB76CB000-memory.dmp
memory/4956-111-0x00007FFAE0720000-0x00007FFAE0730000-memory.dmp
memory/5424-134-0x000001DA73CC0000-0x000001DA73CEB000-memory.dmp
memory/5424-135-0x00007FFAE0720000-0x00007FFAE0730000-memory.dmp
memory/5920-124-0x0000000003560000-0x000000000358B000-memory.dmp
memory/5920-125-0x00007FFAE0720000-0x00007FFAE0730000-memory.dmp