Overview
overview
8Static
static
5libiconv-2.dll
windows10-2004-x64
1libiconv-2.dll
windows11-ltsc_2024-x64
1libidn2-0.dll
windows10-2004-x64
1libidn2-0.dll
windows11-ltsc_2024-x64
1libintl-8.dll
windows10-2004-x64
1libintl-8.dll
windows11-ltsc_2024-x64
1libpsl-5.dll
windows10-2004-x64
7libpsl-5.dll
windows11-ltsc_2024-x64
8libunistring-5.dll
windows10-2004-x64
1libunistring-5.dll
windows11-ltsc_2024-x64
1psl.exe
windows10-2004-x64
6psl.exe
windows11-ltsc_2024-x64
6Analysis
- max time kernel
149s - max time network
133s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
26/06/2026, 16:13
Static task
static1
Behavioral task
behavioral1
Sample
libiconv-2.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
libiconv-2.dll
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral3
Sample
libidn2-0.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
libidn2-0.dll
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral5
Sample
libintl-8.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
libintl-8.dll
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral7
Sample
libpsl-5.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
libpsl-5.dll
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral9
Sample
libunistring-5.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
libunistring-5.dll
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral11
Sample
psl.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
psl.exe
Resource
win11ltsc2024-20260618-en
General
- Target libpsl-5.dll
- Size 7.3MB
- Sample260626-tpbanscx8x
- SHA256 1edf77288976e898ae88fdc56a82d1bfe5dc81d6dbb171510de78059cdd1b9ea
- MD5 7ca47376b4699429c324acb9c371ea9b
- SHA1 4a1b1f975499a2fff3668c9527cb5d85144f4930
- SHA512 a198e400c68eea7a00ee8cc4c54b96069bf07d9a7cec80d9202bb3bf2a0a400f71b4a1baca78b03b37a8c1b62c50342e43b53fb8a956a912c45a61b27f6d1605
- SSDEEP 98304:lNdwN/s9QjmxE6/0i1f0fRM+uh1kecu50qYCIHV1p6x0RxguP0yW:Xdwm+Z6/05ReKcRYVVrFP0yW
- TLSH T123768D367F805AA6C506C935B6379232C2A2B832F7E7818B7955D60B7E37B414E39F10
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
pid Process 5808 DCRCVDrv.sys - Suspicious behavior: LoadsDriver 1 IoCs
pid Process 656 Process not Found
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Windows\Temp\DCRCVDrv.sys
- Size 137KB
- SHA256 87e8d39db624f37d3e77aedf487a2dfd197f71a4730ea74f4e7a4341deaec2ff
- MD5 567c158ee0858f8e941d4ab7a6c18dbc
- SHA1 47d922b0fd5d704025d14ef98ded46e74830a423
- SHA512 f976cb8e9a2f0fc769e2e4345d18e1e9f01fdb1c4303eb20d94b625467e60ce20dd120e77a96d9ba498361dd6dc0066535404cb22cf99fc49607d1f35eaed2ab
- SSDEEP 3072:6pEFTp46B6ETbeP/ItLK9Di8/4BQaeJzP:Y8Tp46B6EOLgBQX
- TLSH T10CD33A12A36550A4E977E2B8C6B65263EFF37861133547CF03608A654F23BE4B93A3D1
- MD5 SHA1 SHA512 SSDEEP TLSH