3fa5781102a10e881258de917f6fb940cdd76b89f1a31b06cbdb71f14d665a01

Analysis

max time kernel
149s
max time network
119s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
23/04/2026, 09:25

Target
Lyra.dll
Size 2.1MB
Sample260423-ldvwyaav2q
SHA256 3fa5781102a10e881258de917f6fb940cdd76b89f1a31b06cbdb71f14d665a01
MD5 3ff444d58c61eb6418601152ad60262c
SHA1 a5ead28e710e4b4f5ddcb032daa62d54fcad3eb4
SHA512 d12413395c7cbbebafdfdeb6631433f70c1a5a0f13f0518b1cb0ab19bcb8096e666deb774cacddcb1a8c61c020e4582892a1b70b32fb9f2c130df4f1855630df
SSDEEP 49152:uPTPf7k9Jm/xjdr6vFs4q8+0bgn4Bwoi/mprmMHf432+PRG:OzTWmJ
TLSH
T136A57CB4A6E600D4D1AAC03CCD539D1FE672749843B157DB07E08A65CF6BBD06A3ED28
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Badlisted process makes network request 1 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
2	920	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Lyra.dll,#1
1⤵
- Badlisted process makes network request
PID:920