Analysis
- max time kernel
149s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
13/11/2026, 00:21
General
- Target 3eb415e7e09bdbf462acfa44e0ccd47196c03ddca53fbf296cbdf9ab42016bea.exe
- Size 45KB
- Sample261113-ancybsdz7w
- SHA256 3eb415e7e09bdbf462acfa44e0ccd47196c03ddca53fbf296cbdf9ab42016bea
Malware Config
Signatures
- Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
Processes
-
C:\Users\Admin\AppData\Local\Temp\3eb415e7e09bdbf462acfa44e0ccd47196c03ddca53fbf296cbdf9ab42016bea.exe"C:\Users\Admin\AppData\Local\Temp\3eb415e7e09bdbf462acfa44e0ccd47196c03ddca53fbf296cbdf9ab42016bea.exe"1⤵
- Reads the TCP/IP host and domain name from the registry
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3520-0-0x00007FFD123AF000-0x00007FFD123B0000-memory.dmp
memory/3520-1-0x0000000000B00000-0x0000000000B12000-memory.dmp
memory/3520-2-0x00007FFD12220000-0x00007FFD12BC4000-memory.dmp
memory/3520-3-0x00007FFD12220000-0x00007FFD12BC4000-memory.dmp
memory/3520-4-0x00007FFD12220000-0x00007FFD12BC4000-memory.dmp
memory/3520-5-0x00007FFD12220000-0x00007FFD12BC4000-memory.dmp
memory/3520-7-0x00007FFD12220000-0x00007FFD12BC4000-memory.dmp
memory/3520-6-0x00007FFD12220000-0x00007FFD12BC4000-memory.dmp
memory/3520-8-0x00007FFD12220000-0x00007FFD12BC4000-memory.dmp
memory/3520-9-0x000000001B6D0000-0x000000001B6D8000-memory.dmp
memory/3520-11-0x000000001B720000-0x000000001B72E000-memory.dmp
memory/3520-10-0x000000001B750000-0x000000001B78E000-memory.dmp
memory/3520-13-0x00007FFD12220000-0x00007FFD12BC4000-memory.dmp
memory/3520-12-0x00007FFD12220000-0x00007FFD12BC4000-memory.dmp
memory/3520-14-0x00007FFD12220000-0x00007FFD12BC4000-memory.dmp
memory/3520-15-0x00007FFD12220000-0x00007FFD12BC4000-memory.dmp
memory/3520-16-0x00007FFD12220000-0x00007FFD12BC4000-memory.dmp
memory/3520-17-0x00007FFD12220000-0x00007FFD12BC4000-memory.dmp
memory/3520-18-0x00007FFD12220000-0x00007FFD12BC4000-memory.dmp