ec5ba8a43aa13b93d7d12169a9418cbb7444237d654abdc639bd13f6866535d1

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
05/07/2026, 06:03

Target
ec5ba8a43aa13b93d7d12169a9418cbb7444237d654abdc639bd13f6866535d1.exe
Size 13KB
Sample260705-gr7qfady9q
SHA256 ec5ba8a43aa13b93d7d12169a9418cbb7444237d654abdc639bd13f6866535d1
MD5 3b0ab9ceb4551106ea73f138a19ca7cd
SHA1 52697864b0adc7d8d91853ce6bbb50ea7d4afab0
SHA512 f1cc9b6373738de445966b49c5170246e792cb9613f56fa101523bb3eaf28447bc563cae62667048db9509ac7c95626f9041e64c2f6fef94cc341d44f794e2c4
SSDEEP 192:O/xDM6p1EwoqliK6uOKIJ4tlDwaSsHq3bheeJXkO/5kn3kh3Vx1:OpgA1Ew/V4Kt1HueMxhk3Elx
TLSH
T1E8522B86F1D2D2FCC0EEC335961710AA95B6348017353EFF779848922EA2221957DBD8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Loads dropped DLL 1 IoCs

pid	Process
3828	rundll32.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 1464 wrote to memory of 3828	1464	ec5ba8a43aa13b93d7d12169a9418cbb7444237d654abdc639bd13f6866535d1.exe	89

C:\Users\Admin\AppData\Local\Temp\ec5ba8a43aa13b93d7d12169a9418cbb7444237d654abdc639bd13f6866535d1.exe
"C:\Users\Admin\AppData\Local\Temp\ec5ba8a43aa13b93d7d12169a9418cbb7444237d654abdc639bd13f6866535d1.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1464
- C:\Windows\SYSTEM32\rundll32.exe
  rundll32.exe "C:\ProgramData\BrambleNet\Journal\Outbox\kvs-mgr.dll",ResetComponent
  2⤵
  - Loads dropped DLL
  PID:3828

kvs-mgr.dll

Path C:\ProgramData\BrambleNet\Journal\Outbox\kvs-mgr.dll
Size 410KB
SHA256 0def2f1930b6e6d4f9122bd34a90bf6ac0e2d4985e3dbe12dca3233a3c31b57c
MD5 9616aee97e460921abfb02873c90f87a
SHA1 6528c02dc8eb14cd34d302fc24ee1b5765176747
SHA512 877b471200bdcae1f00a2c4eed6af8628922e100fcb6845ab73c535bbbc40ddc215f266bacb043b03d13659eecb740755d8cf463f0995b6589b4c965377c6292
SSDEEP 6144:iXcNgO0MUqgPlIGsuEcB5kxBJFO6MNIH5oAIB55H9948JmG94P0:iXcNSx8u9B5+6t+H5oAYp+tG94
TLSH
T1B3941885F143AEF4C4EBC335920652E39AFC78181B345E7B9BC86B641E80761B6346ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download