Analysis
- max time kernel
40s - max time network
9s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260618-en - resource tags
- submitted
20/06/2026, 02:40
General
- Target b96858e01667381eb431951beffeaec83e187a97eb2d4c2004294e8802915fc5.dll
- Size 3.7MB
- Sample260620-c53w7acy4l
- SHA256 b96858e01667381eb431951beffeaec83e187a97eb2d4c2004294e8802915fc5
Score
8/10
Malware Config
Signatures
- Badlisted process makes network request 1 IoCs
Network request originating from process or tool commonly abused by malware.
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
- Suspicious behavior: EnumeratesProcesses 6 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\b96858e01667381eb431951beffeaec83e187a97eb2d4c2004294e8802915fc5.dll,#11⤵
- Badlisted process makes network request
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5432-0-0x00000006B0000000-0x00000006B0222000-memory.dmp
memory/5432-1-0x00000006B0000000-0x00000006B0222000-memory.dmp
memory/5432-2-0x00000006B0000000-0x00000006B0222000-memory.dmp
memory/5432-3-0x00007FFD2D9B0000-0x00007FFD2DD7C000-memory.dmp