094bfeb0692885f1e56bb363e1065099eab48a7988c8603fd6a3fb49ec88b09c

Analysis

max time kernel
149s
max time network
94s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
27/05/2026, 11:14

Target
BoostrapplerNET/runtimes/app.asar.unpacked/node_modules/vibrancy-win/binding.dll
Size 118KB
Sample260527-nb5dpscs4l
SHA256 094bfeb0692885f1e56bb363e1065099eab48a7988c8603fd6a3fb49ec88b09c
MD5 6c12c930f974e5bc7872b58964f42359
SHA1 805c5c899c32535d2ee8b2bc12deefe5fdaae566
SHA512 f46c416e3f33e0526c2d4cb3df738f7c9b11fece350b90ca9613e5d86bae7a363dd20b80d62f5745a9d51773b655199537b09fcf47acf226f35002f39f1596d3
SSDEEP 3072:/WKjx2yp1tLqA1HB4kdeRqGmX5EMMi6leGS:3xBPVf1HB4kER4UFhS
TLSH
T18AC35C1BB3E540BBE1768138C8671A15D372B8214B61DBAF13A4465D1F237E0AD3EF62
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

System Time Discovery

pid	Process
2712	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\BoostrapplerNET\runtimes\app.asar.unpacked\node_modules\vibrancy-win\binding.dll,#1
1⤵
- System Time Discovery
PID:2712

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact