c09ee1119dbfec5b4aebc9ad2e6fbab29ce3c87a4ed43a5f85f555e73227ea06

Analysis

user interaction
yes
max time kernel
18s
max time network
19s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
23/05/2026, 18:11

Target
StandLeo.dll
Size 507KB
Sample260523-ws2cdagt5m
SHA256 c09ee1119dbfec5b4aebc9ad2e6fbab29ce3c87a4ed43a5f85f555e73227ea06
MD5 9bd396dcddd8360499fef0dc3797aceb
SHA1 5f7d33da1f829917e25f50eaddaf19526420d950
SHA512 2e409c1c8b7eb542e3c444449890946b061be4b7c56dc111b21dac51f2f6489e59157cca682314b3399bb7fdf19c4b745f56b7c7895e67020a642e65aecd45c2
SSDEEP 12288:smme8AAZI5z7y68VFgGE5ORORvJstiMpzThzpJHVSUnZbFPq:OAAZNhISpzVzp9VSUnZbFPq
TLSH
T17CB47D04A2F403A9F17790349857A717EA323885472196CB23A4DF5F5FB17E0BAB7B12
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2288	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\StandLeo.dll,#1
1⤵
- Suspicious use of FindShellTrayWindow
PID:2288