Analysis
- max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
- submitted
06/05/2026, 16:16
General
- Target c48ee8f1da8ec0d5357ce40a8c9d87317d9d99a6b16c904bfc8ac01bb4eea9b7.dll
- Size 1.3MB
- Sample260506-trbdfses9s
- SHA256 c48ee8f1da8ec0d5357ce40a8c9d87317d9d99a6b16c904bfc8ac01bb4eea9b7
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\c48ee8f1da8ec0d5357ce40a8c9d87317d9d99a6b16c904bfc8ac01bb4eea9b7.dll,#11⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4204-0-0x00007FFF99080000-0x00007FFF994EE000-memory.dmp
memory/4204-1-0x00007FFF99080000-0x00007FFF994EE000-memory.dmp
memory/4204-6-0x00007FFF75330000-0x00007FFF75340000-memory.dmp
memory/4204-4-0x00007FFF75330000-0x00007FFF75340000-memory.dmp
memory/4204-7-0x00007FFF7BE40000-0x00007FFF7C035000-memory.dmp
memory/4204-9-0x00007FFF7BE40000-0x00007FFF7C035000-memory.dmp
memory/4204-8-0x00007FFF7BE40000-0x00007FFF7C035000-memory.dmp
memory/4204-18-0x00007FFF798B0000-0x00007FFF79B79000-memory.dmp
memory/4204-19-0x00007FFF798B0000-0x00007FFF79B79000-memory.dmp
memory/4204-26-0x00007FFF99080000-0x00007FFF994EE000-memory.dmp