Overview
overview
3Static
static
3malware/D3...r3.dll
windows10-2004-x64
1malware/Pe...r3.dll
windows10-2004-x64
1malware/Pe...r3.dll
windows11-21h2-x64
1malware/Pr...r3.dll
windows10-2004-x64
1malware/Pr...r3.dll
windows11-21h2-x64
1malware/mal.exe
windows10-2004-x64
1malware/mal.exe
windows11-21h2-x64
1malware/vc...r3.dll
windows10-2004-x64
1malware/vc...r3.dll
windows11-21h2-x64
1malware/wp...r3.dll
windows10-2004-x64
1malware/wp...r3.dll
windows11-21h2-x64
1Analysis
- max time kernel
899s - max time network
448s - platform
windows11-21h2_x64 - resource
win11-20260513-de - resource tags
arch:x64arch:x86image:win11-20260513-delocale:de-deos:windows11-21h2-x64systemwindows - submitted
02/06/2026, 18:24
Static task
static1
Behavioral task
behavioral1
Sample
malware/D3DCompiler_47_cor3.dll
Resource
win10v2004-20260513-de
Behavioral task
behavioral2
Sample
malware/PenImc_cor3.dll
Resource
win10v2004-20260513-de
Behavioral task
behavioral3
Sample
malware/PenImc_cor3.dll
Resource
win11-20260513-de
Behavioral task
behavioral4
Sample
malware/PresentationNative_cor3.dll
Resource
win10v2004-20260513-de
Behavioral task
behavioral5
Sample
malware/PresentationNative_cor3.dll
Resource
win11-20260513-de
Behavioral task
behavioral6
Sample
malware/mal.exe
Resource
win10v2004-20260513-de
Behavioral task
behavioral7
Sample
malware/mal.exe
Resource
win11-20260513-de
Behavioral task
behavioral8
Sample
malware/vcruntime140_cor3.dll
Resource
win10v2004-20260513-de
Behavioral task
behavioral9
Sample
malware/vcruntime140_cor3.dll
Resource
win11-20260513-de
Behavioral task
behavioral10
Sample
malware/wpfgfx_cor3.dll
Resource
win10v2004-20260513-de
Behavioral task
behavioral11
Sample
malware/wpfgfx_cor3.dll
Resource
win11-20260513-de
General
- Target malware/mal.exe
- Size 146.3MB
- Sample260602-w15prscw5y
- SHA256 0f2cc4494dac8fc8ceabf366a6b26d5946b587611f6d8ad94c7fcc64d1a1ac31
- MD5 78719c6941afd16f8150b4bed494e7b2
- SHA1 e20a41efbb29e06d30889b374d224906345baf65
- SHA512 e3389ce7e37bc4d6c797a44581f9606bf6633194bef7cd7883328ad4b9454796ed72e73240bf66eb775696f7173567355c8454fb88145baad772815589046d94
- SSDEEP 786432:Gp/UOl49x71HCUV5OtsFdtaCs4TmsCfTDk8fOm41gT0G0Da:4/UU4P7EU7DfC7DLfOlqh
- TLSH T140787D1163E81A05E27B8678977382A1E6B1BC535711C1CF0494FE4A2F77BC2BA36376
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 3560 mal.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3560 mal.exe