Analysis
- max time kernel
149s - max time network
156s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
02/06/2026, 01:53
Behavioral task
behavioral1
Sample
tmpxge4nzku.dll
Resource
win10ltsc2021-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmpxge4nzku.dll
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmpxge4nzku.dll
Resource
win11-20260513-en
1 signatures
150 seconds
General
- Target tmpxge4nzku.dll
- Size 2.1MB
- Sample260602-cbc4nscv8p
- SHA256 a20d56ab2e53b3a599af9904f163bb2e1b2bb7f2c98432519e1fbe87c3867e66
- MD5 637e0ef5d12fd38122ea517dc57854f3
- SHA1 169c40bbfa251680af68dbac9dbbca5bfdd60d61
- SHA512 c82f9087dae66a87adf0dbca6834854bb21f15252cc6f571b595895d07f8ce368832bfd380df51c2f4fd07287a7ade0a81b5636a1e72e2ac18ed2dc66f51262d
- SSDEEP 49152:bGgJ3vE7rwsY5+a+h1cHkUnl/u9Zx/PgxeAaE+bK2i4rG:NavI5+qHxsgxeAenrG
- TLSH T1C0A5AF0AB7A840B8D1A7C278CA579A0BF7F174051B3497DF129046AE1F33BE15A7E325
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Malware Config
Signatures
- Badlisted process makes network request 6 IoCs
Network request originating from process or tool commonly abused by malware.
flow pid Process 23 788 rundll32.exe 33 788 rundll32.exe 36 788 rundll32.exe 43 788 rundll32.exe 74 788 rundll32.exe 82 788 rundll32.exe