Analysis
- max time kernel
149s - max time network
93s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
20/04/2026, 22:51
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0677e7283b4a6cd70dec17243c2eb92e341660735c444b5ae42193094d161abe_VERSION.dll
Resource
win10v2004-20260130-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
0677e7283b4a6cd70dec17243c2eb92e341660735c444b5ae42193094d161abe_VERSION.dll
Resource
win11-20260130-en
2 signatures
150 seconds
General
- Target 0677e7283b4a6cd70dec17243c2eb92e341660735c444b5ae42193094d161abe_VERSION.dll
- Size 232KB
- Sample260420-2s9lmsgz9s
- SHA256 0677e7283b4a6cd70dec17243c2eb92e341660735c444b5ae42193094d161abe
- MD5 9c7dfb001d92c18ab850f454310d4f1d
- SHA1 1ba3f939e8e76f597ccbfc97175003ccce95ec7a
- SHA512 1012e0afd3aa4080e3499b92121326dbca7d52f1c94843afa0b2b4e491eb65f303e9c8a3414f32918b74bc214dc60d46785786aff86c224f2bd2e128fb9b5134
- SSDEEP 6144:f2W7CagsS+zKnkt2mKVuuHypiZ82jSY9/hY:rC97hkoBeQxy
- TLSH T147340A90B2C1FDB6EC998FB820D2530A93BAF081971DEB2B6620FE7C025EB54D573545
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Malware Config
Signatures
- Badlisted process makes network request 1 IoCs
Network request originating from process or tool commonly abused by malware.
flow pid Process 2 2732 rundll32.exe - Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000\Software\Microsoft\Windows\CurrentVersion\Run\EdgeUpdate = "C:\\Windows\\system32\\rundll32.exe" rundll32.exe
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0677e7283b4a6cd70dec17243c2eb92e341660735c444b5ae42193094d161abe_VERSION.dll,#11⤵
- Badlisted process makes network request
- Adds Run key to start application
PID:2732
-
C:\Windows\system32\rundll32.exeC:\Windows\system32\rundll32.exe1⤵PID:2384