Analysis
- max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
- submitted
06/05/2026, 16:17
General
- Target b5395bd98c1915016be695ab5a0d1e561e34f7893e18c992e8f0bbe150570011.dll
- Size 1.3MB
- Sample260506-trbn8aes9v
- SHA256 b5395bd98c1915016be695ab5a0d1e561e34f7893e18c992e8f0bbe150570011
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\b5395bd98c1915016be695ab5a0d1e561e34f7893e18c992e8f0bbe150570011.dll,#11⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5424-0-0x00007FF87EDD0000-0x00007FF87F23E000-memory.dmp
memory/5424-3-0x00007FF87EDD0000-0x00007FF87F23E000-memory.dmp
memory/5424-4-0x00007FF85B0B0000-0x00007FF85B0C0000-memory.dmp
memory/5424-6-0x00007FF85B0B0000-0x00007FF85B0C0000-memory.dmp
memory/5424-7-0x00007FF861C00000-0x00007FF861DF5000-memory.dmp
memory/5424-10-0x00007FF861C00000-0x00007FF861DF5000-memory.dmp
memory/5424-8-0x00007FF861C00000-0x00007FF861DF5000-memory.dmp
memory/5424-18-0x00007FF85F9B0000-0x00007FF85FC79000-memory.dmp
memory/5424-19-0x00007FF85F9B0000-0x00007FF85FC79000-memory.dmp
memory/5424-26-0x00007FF87EDD0000-0x00007FF87F23E000-memory.dmp