Analysis
- user interaction
yes - max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
- submitted
03/05/2026, 01:25
General
- Target mpclient.dll
- Size 2.4MB
- Sample260503-bs51caat3x
- SHA256 09592cd74cd574639077445a95f952f17f8e39b70cb307ee466a2bffdac025a2
Score
8/10
Malware Config
Signatures
- Badlisted process makes network request 8 IoCs
Network request originating from process or tool commonly abused by malware.
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\mpclient.dll,#11⤵
- Badlisted process makes network request
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1928-0-0x0000000140000000-0x000000014003B000-memory.dmp
memory/1928-2-0x0000000140000000-0x000000014003B000-memory.dmp
memory/1928-1-0x00007FFEE94B0000-0x00007FFEE9754000-memory.dmp