Analysis
- max time kernel
149s - max time network
95s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
- submitted
06/05/2026, 16:16
General
- Target c48ee8f1da8ec0d5357ce40a8c9d87317d9d99a6b16c904bfc8ac01bb4eea9b7.dll
- Size 1.3MB
- Sample260506-trbdfses9s
- SHA256 c48ee8f1da8ec0d5357ce40a8c9d87317d9d99a6b16c904bfc8ac01bb4eea9b7
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\c48ee8f1da8ec0d5357ce40a8c9d87317d9d99a6b16c904bfc8ac01bb4eea9b7.dll,#11⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/388-0-0x00007FF85BD40000-0x00007FF85C1AE000-memory.dmp
memory/388-3-0x00007FF85BD40000-0x00007FF85C1AE000-memory.dmp
memory/388-4-0x00007FF83AE90000-0x00007FF83AEA0000-memory.dmp
memory/388-6-0x00007FF83AE90000-0x00007FF83AEA0000-memory.dmp
memory/388-7-0x00007FF841A00000-0x00007FF841C09000-memory.dmp
memory/388-9-0x00007FF841A00000-0x00007FF841C09000-memory.dmp
memory/388-8-0x00007FF841A00000-0x00007FF841C09000-memory.dmp
memory/388-18-0x00007FF83F310000-0x00007FF83F684000-memory.dmp
memory/388-19-0x00007FF83F310000-0x00007FF83F684000-memory.dmp
memory/388-26-0x00007FF85BD40000-0x00007FF85C1AE000-memory.dmp
memory/388-27-0x0000022976890000-0x00000229768C1000-memory.dmp