Analysis
- max time kernel
149s - max time network
95s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
- submitted
06/05/2026, 16:17
General
- Target b5395bd98c1915016be695ab5a0d1e561e34f7893e18c992e8f0bbe150570011.dll
- Size 1.3MB
- Sample260506-trbn8aes9v
- SHA256 b5395bd98c1915016be695ab5a0d1e561e34f7893e18c992e8f0bbe150570011
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\b5395bd98c1915016be695ab5a0d1e561e34f7893e18c992e8f0bbe150570011.dll,#11⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1388-0-0x00007FFB226A0000-0x00007FFB22B0E000-memory.dmp
memory/1388-4-0x00007FFB017F0000-0x00007FFB01800000-memory.dmp
memory/1388-2-0x00007FFB226A0000-0x00007FFB22B0E000-memory.dmp
memory/1388-6-0x00007FFB017F0000-0x00007FFB01800000-memory.dmp
memory/1388-7-0x00007FFB08330000-0x00007FFB08539000-memory.dmp
memory/1388-9-0x00007FFB08330000-0x00007FFB08539000-memory.dmp
memory/1388-8-0x00007FFB08330000-0x00007FFB08539000-memory.dmp
memory/1388-18-0x00007FFB059F0000-0x00007FFB05D64000-memory.dmp
memory/1388-19-0x00007FFB059F0000-0x00007FFB05D64000-memory.dmp
memory/1388-26-0x00007FFB226A0000-0x00007FFB22B0E000-memory.dmp