5bce135b5fa89159db139224fe4baa58162194616b9c48ddb2a4d3ab43b007ae

Analysis

max time kernel
149s
max time network
131s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
27/05/2026, 19:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
HFor1.2+/bin/Win64_Shipping_Client/HighHeels.dll
Size 61KB
Sample260527-yqdjmsg19j
SHA256 5bce135b5fa89159db139224fe4baa58162194616b9c48ddb2a4d3ab43b007ae
MD5 e3b94177d72853e38a72c8d2f2f3e406
SHA1 2de8e1703b5fcca414798cb1110f5ea28ed388c7
SHA512 581280e15ecb00b9ee4c4e1dab404c854e8706a367753e92adaaac077036584e4e3108671a2ed7ac65c6d5046d1e9b5faf503e6b17fc821ecfdc2a0d6fd02af4
SSDEEP 1536:Ve7wXUElF5hpQVcRB9cGeFZb1y6JVEi9W4WpX:VeJE/FD+G2b1y6JVEi9W4WpX
TLSH
T1F453849D326072DFD857C472DEA82CB4EA60747B831F8607A42315EDAA0D987DF241F2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 1 IoCs

Adversaries may check for Internet connectivity on compromised systems.

discovery

Internet Connection Discovery

T1016.001

pid	Process
5636	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\HFor1.2+\bin\Win64_Shipping_Client\HighHeels.dll,#1
1⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:5636

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads