136e64ac07dce5a3b4935d5a9c5cfe03983c0b3065f46a30a45536d5b1681d5c

Analysis

max time kernel
149s
max time network
156s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
09/05/2026, 04:29

Target
driver/mm.cat
Size 11KB
Sample260509-e4g97sdz6m
SHA256 136e64ac07dce5a3b4935d5a9c5cfe03983c0b3065f46a30a45536d5b1681d5c
MD5 1fe1fc7cc73fb17e995d65835d51ca94
SHA1 249acf0a3a362b2163127bd76f6d4d6aa463297d
SHA512 31fe1bdcb5f243a6eecc40006fc70793bc5aea9d95ffe449117cb67366f0f120c393716ffe93b65a73c8b2dfe02917f1d0dcf4ca62aa302fe685513b8cc80bdc
SSDEEP 192:27bR3HCkJC9aJ9EwvZvhYC3kn5NQlO8X01k9z3AwkqY:aRJZvh3Un5KlO8R9zJkqY
TLSH
T1093219B1896841C2F9677C6093E8F9973C3D27C7582044A6269FFB190CA73C4FB2826D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Badlisted process makes network request 1 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
2	4552	rundll32.exe

C:\Windows\system32\rundll32.exe
C:\Windows\system32\rundll32.exe cryptext.dll,CryptExtOpenCAT C:\Users\Admin\AppData\Local\Temp\driver\mm.cat
1⤵
- Badlisted process makes network request
PID:4552

memory/4552-2-0x0000021907F80000-0x0000021907F8C000-memory.dmp

Download

memory/4552-3-0x0000021909C70000-0x0000021909CCD000-memory.dmp

Download