34b09c16f347ecda5b4e40ec00d19c10917c3151fa55b0294d7987fdc5baf950

Analysis

max time kernel
149s
max time network
101s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
20/04/2026, 23:26

Target
34b09c16f347ecda5b4e40ec00d19c10917c3151fa55b0294d7987fdc5baf950_nethost.dll
Size 112KB
Sample260420-3ev2rsfv4p
SHA256 34b09c16f347ecda5b4e40ec00d19c10917c3151fa55b0294d7987fdc5baf950
MD5 8c4668996541098b36a9eadbb4130436
SHA1 bb883ba3d9dfb3233785c96da9c03dea5175c656
SHA512 8f674e76825fe48827b3f3a59288d307547fe3d8a808508b776100f23df65323d58b45bf0fda6593a09690c7e592c6b1ee7250eba46531837c4600ff90b192ae
SSDEEP 3072:2loll4YSI2bdOASdo5XjxZsIV1dqj5NEWax:xlLeAdoZbVm5GHx
TLSH
T1CAB35A5762F500BBE1B7923885A34A06DBB2B81557609FEF07A4464B5F233E18D3EF21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Badlisted process makes network request 1 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
2	4684	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\34b09c16f347ecda5b4e40ec00d19c10917c3151fa55b0294d7987fdc5baf950_nethost.dll,#1
1⤵
- Badlisted process makes network request
PID:4684

memory/4684-0-0x000002B0564C0000-0x000002B05655E000-memory.dmp

Download

memory/4684-3-0x000002B0564C0000-0x000002B05655E000-memory.dmp

Download