Analysis
- max time kernel
149s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
20/04/2026, 23:09
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2d22856022fe1009ac1abcc65d63048ccb58590a41a5cbd00c90fef21135bc8d_nethost.dll
Resource
win10v2004-20260130-en
2 signatures
150 seconds
General
- Target 2d22856022fe1009ac1abcc65d63048ccb58590a41a5cbd00c90fef21135bc8d_nethost.dll
- Size 107KB
- Sample260420-243mgahs4v
- SHA256 2d22856022fe1009ac1abcc65d63048ccb58590a41a5cbd00c90fef21135bc8d
- MD5 ccfc074c7411a1690e79af150682bb8c
- SHA1 e907c13a1530739991f4cc736186abd18d7f90a0
- SHA512 6509da50f88d0637274aaddc09f0d7715595a7c7a13d5ab4803e2b5230ca864dfb3a16969c46c9d0c69abc1076302962443d313494f4461557f53cbacf01c7e6
- SSDEEP 1536:LkfjEIf3LlY8ktFlEEsWJp2TH4SDmQc0cp9b6EsEovsWy9hdi9dlx7sErD:wXf3irLrXJpuYmc0m9/svE9byf7sKD
- TLSH T1C6B34A6772A900BBE177873884A74A46D772B85147A0AFFF03A4465A1F633D08D3DF61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Malware Config
Signatures
- Badlisted process makes network request 1 IoCs
Network request originating from process or tool commonly abused by malware.
flow pid Process 8 3484 rundll32.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3484 rundll32.exe 3484 rundll32.exe