75cb6860a9d974dbad5c3f03269b44f3e81d1a6983a63f87972dbe3efff5d222

Analysis

max time kernel
148s
max time network
122s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260617-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/06/2026, 20:04

Target
hook64.dll
Size 49KB
Sample260620-ytrwfahs8p
SHA256 75cb6860a9d974dbad5c3f03269b44f3e81d1a6983a63f87972dbe3efff5d222
MD5 d189baf178a6fbca5ee9b75890d35119
SHA1 0b042e93762fc5bd805e8aea6f3639bdb888c7a9
SHA512 e450f932dd5f7d9bbfc68ad1d66ab90919830b66f5caa61b40140ce8274f03026de1a72c99cf8504e2225c9528b004e0950e6fd1e3628a74c1d6bfb973754bb1
SSDEEP 1536:/VpNe24mrGpovbPEufcIyOGlvQfV+IDSnTBmetM:Npg24mrLPEufcIyOGlvQfV+IDSnTBmeu
TLSH
T1BE334B866B0520E8C152C07ECE2142B7E372B82A033D66FFB7DC89394F656E5E139756
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4076	rundll32.exe
4076	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\hook64.dll,#1
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4076