Analysis
- max time kernel
149s - max time network
149s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
28/05/2026, 11:10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
UMPDC(3).dll
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
UMPDC(3).dll
Resource
win11-20260513-en
1 signatures
150 seconds
General
- Target UMPDC(3).dll
- Size 181KB
- Sample260528-m97faadw2k
- SHA256 20e41f9151518c16eaaec357c16761d4dfebabb425ac727105a10020b34e169e
- MD5 c3343478e7bd123c3bc061304ca2fb5f
- SHA1 9b6870b224743802c2d6f1fa5b80cadf002fa231
- SHA512 d392dced785a18ea70ccf2603daffde9c9ac3ceeb2e4b89d7e31ec88809e5f7cf5488ad9dc5b86f42b6adb9369ff1961a6be4ae55ada421e78d5ed608d4c5dbc
- SSDEEP 3072:8Ddm8cXckTPlvYuWsaMYxbFcnV1lxgM1SpkQVARnlNP4y8PM6LatfS91azlSDysB:0belQuWtRsV1lu0ekKAVP4y8PtWfSLDB
- TLSH T1F304026E3887286CD50EDC7AE4D4C278D47A29F5DFAC1BC26F61CE3C14E364B0A54992
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of WriteProcessMemory 2 IoCs
description pid Process procid_target PID 3168 wrote to memory of 3956 3168 rundll32.exe 82 PID 3168 wrote to memory of 3956 3168 rundll32.exe 82