2a930d63f7020099f6b61733147af4e38cbc3f80ea6eea93c79421103751e6aa

Analysis

max time kernel
149s
max time network
154s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
06/05/2026, 15:50

Target
dotnet/System.Dynamic.Runtime.dll
Size 16KB
Sample260506-tabynadz4x
SHA256 2a930d63f7020099f6b61733147af4e38cbc3f80ea6eea93c79421103751e6aa
MD5 00efc98052b83dc3e9c1494ad542afd8
SHA1 e7458eeb06cd6f2c7c8e30e7a61a75485f3cf631
SHA512 e2722836151fb486e94d2ba7b3db303a51550ad34878160b2b0ec444551a366896696a715bea3dbd52618e2e89078097fd70a6c0b2f0a28ba6addbc739ebefe7
SSDEEP 384:4GMn1jAMWFCWysBlHRN73Yl8R9zrrisIN:y1MNjIlQ9zw
TLSH
T1A5726CE287984203EEA75F7081EAD9837DBD6BC699A0C31E14C5F9451893394EB2133E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

System Time Discovery

pid	Process
3872	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\dotnet\System.Dynamic.Runtime.dll,#1
1⤵
- System Time Discovery
PID:3872

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact