Analysis
- max time kernel
149s - max time network
161s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
25/04/2026, 22:52
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
mpclient.dll
Resource
win10v2004-20260130-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
mpclient.dll
Resource
win11-20260130-en
1 signatures
150 seconds
General
- Target mpclient.dll
- Size 2.4MB
- Sample260425-2tpb4acv7n
- SHA256 bc63f08710076990b3b676edabf2b32536b8db45f681f1e07e26b2062c315459
- MD5 d2d1cdc8b3a2b123b8c12138f56d0be5
- SHA1 ae7b6c3a8576936b25209263adbffd1851bfce96
- SHA512 bf5d9fdcb8d242c6602b937d1cd0eb3ac39527a3abea9b082af5f16173bfc3d7ab36741381cab226bafe8f409147393d17bd1566bd8dd47d0cfecb3faddeb8fe
- SSDEEP 49152:E9mPLT/+LX81aUBYCMN7xUR5lnPs1bLu8e38xzasHAPsH:EuGw8S5R5ln/GQsH
- TLSH T142B56C02799104AEC499B7314CF63281B735F8480B2627D32F97AA743EB7BD15D7A34A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Malware Config
Signatures
- Badlisted process makes network request 8 IoCs
Network request originating from process or tool commonly abused by malware.
flow pid Process 2 2012 rundll32.exe 3 2012 rundll32.exe 5 2012 rundll32.exe 6 2012 rundll32.exe 7 2012 rundll32.exe 9 2012 rundll32.exe 11 2012 rundll32.exe 13 2012 rundll32.exe